Skip to content or view screen version

Hidden Article

This posting has been hidden because it breaches the Indymedia UK (IMC UK) Editorial Guidelines.

IMC UK is an interactive site offering inclusive participation. All postings to the open publishing newswire are the responsibility of the individual authors and not of IMC UK. Although IMC UK volunteers attempt to ensure accuracy of the newswire, they take no responsibility legal or otherwise for the contents of the open publishing site. Mention of external web sites or services is for information purposes only and constitutes neither an endorsement nor a recommendation.

Why does Indymedia use invalid security certificates?

anon | 27.03.2011 20:18 | Indymedia | Technology

The following is the output of the Firefox web browser when you try to commment on a London Indymedia thread.

Apparently Indymedia uses invalid security certificates. Why is this?

This Connection is Untrusted





You have asked Firefox to connect
securely to london.indymedia.org, but we can't confirm that your connection is secure.
Normally, when you try to connect securely,
sites will present trusted identification to prove that you are
going to the right place. However, this site's identity can't be verified.



What Should I Do?

If you usually connect to
this site without problems, this error could mean that someone is
trying to impersonate the site, and you shouldn't continue.






Technical Details




I Understand the Risks

If you understand what's going on, you
can tell Firefox to start trusting this site's identification.
Even if you trust the site, this error could mean that someone is
tampering with your connection.
Don't add an exception unless
you know there's a good reason why this site doesn't use trusted identification.

anon

Comments

Hide the following 3 comments

Good question

27.03.2011 22:10

But it'll get hidden quickly enough - on Indymedia, you cannot be seen to criticise the running of the site.

turing

Free community certs

27.03.2011 22:38

Run debian or manually install the root cert from  http://www.cacert.org/certs/root.crt to solve this.

cacert.org
- Homepage: http://cacert.org/

Shhhhhhh.....

27.03.2011 22:43

All criticism is filed away under "non-news" because it is evil.
Moderators don't like anything that would cause a panic (eg. the "IP logging" scandal also known as "IP-gate" where they said for years that IPs arnt logged but in reality it turned out that wasn't quite true but they didn't want to tell people because they thought that we didn't need to know)

alphadog