rmd now available at addons.mozilla.org
The Remember Mismatched Domains extension is now available from addons.mozilla.org. It went live yesterday and is already getting some good feedback. Thanks.
Version 1.1.2 is the latest. You may as well go and grab it from over there:
https://addons.mozilla.org/extensions/moreinfo.php?id=2131
Insert Real Name says:
April 20, 2006 at 5:04 pm
This extension is very useful, but I’m wondering if it could not be made more secure against spoofing attempts, etc.,by storing the certificate fingerprint and using that as the criterion for not displaying the mismatched domains dialog? Is there an API to access the certificate fingerprint via Javascript?
andrew says:
April 20, 2006 at 7:59 pm
Insert,
Yeah, it’s possible to query the sha1 or md5 fingerprint the certificate presents. This has come up before, I just haven’t been convinced that the fingerprint can’t be spoofed too. Then again I’m no SSL expert.
It wouldn’t be a difficult change to make if you wanted to convince me… (email me if you prefer).
A.