On Tuesday 22 of December 2009, Mike Hommey wrote:
> Hi,
>
> Sorry for the late answer.
>
> On Wed, Oct 01, 2008 at 02:33:01PM +0200, Vladislav Kurz wrote:
> > Package: iceweasel
> > Version: 3.0.1-1
> > Severity: normal
> >
> > Hello,
> >
> > it seems that the storage for SSL certificate exceptions is limited, and
> > used as circular buffer. I visit a lot of sites with self-signed
> > certificates, and from time to time I have to confirm all exceptions
> > again as if I visit the site for the first time.
> >
> > This is not only annoying but dangerous. What if the site certificate
> > changes and Iceweasel just forgets the old certificate. No warning etc.
> > In firefox2 - exceptions were really stored permanently and I got
> > warnings when the certificate expired or changed. But adding the same
> > certificate over and over again will just train the user to add the
> > exception as quickly as possible without really checking the content of
> > the
> > certificate.
> >
> > It seems that firefox bugzilla report 436122 might be related to this.
>
> Do you have an idea on how many exceptions need to be added before it
> starts dropping some of them ? Would you mind following the contents of
> $HOME/.mozilla/firefox/*/cert_override.txt file, which contains these
> overrides ?
Hi,
now I have 28 overrides. However I almost forgot about this bug. In the
meantime I upgraded to icewaeasel 3.0.6-3 and this bug did not occur for
quite a long time. I'm not sure, but it might have been fixed by upgrade.
--
Regards
Vladislav Kurz
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
