Certificate Patrol

Wurdearring: 3 fan de 5 stjerren

troch muelman op Sept. 19, 2014 · permalink

This is nice, sure. But in the current form, unfortunatley also greatly annoying. Generally there are just too many sites that change certificates like people change clothes, and just too few sites that need the special attention that this addon provides.

My proposal is to only check certificates that:

a) come from sites that are on a force-check-list (the opposite of the current ignore-list)
b) are signed by root certificates that are not in the trust-store
c) are self-signed