3

Even with all checkboxes turned off in settings, Certificate Patrol often shows top bar or even popup messages when I don't care.

Is there an alternative to CertPatrol with less annoying UI?

Instead of popups or top bar there should be just changed icon colour (showing the popup when I click on it). This way I don't get distracted when doing leisure browsing, still get notified of changing certificates when doing something serious.

  • Added answer: Firefox now does this itself. Unfortunately, just probably not for your own bank... – VicAche May 14 '15 at 16:52
1

Firefox 32 supports Public Key Pinning in a much less annoying way than Certificate Patrol. It does so in a not so intrusive way:

enter image description here

Unfortunately, only a limited list of websites are supported, see the Pinning wiki for more info.

| improve this answer | |
  • 1
    And what happens in pinned certificate changed? I want "soft pinning" for multiple sites. Green status - everything OK; Blue status - certificated changed within the same CA because of old is expiring; Yellow status - unexpected certificate change; Red status - something worse, like EV certificate changing to a free certificate. The popup may be shown only if there is a password or authentication cookie present. – Vi. May 14 '15 at 23:11
  • For example, why not have my bank site pinned? This pinning list looks live separating "Jovi" sites from "bovi" ones which may be unprotected from CA abuse... Is there some protocol like "X-Pin-This-Certificate-Please: 6 month" for auto-pinning? – Vi. May 14 '15 at 23:15
  • I totally agree with you. Life is tough. – VicAche May 15 '15 at 8:24
  • @Vi. but most websites change their certificate before expiration, even sometime depending on which server.. Certificate patrols return a lot of unjustified warnings (without even discussing how they are reported), Firefox chose the opposite pass - every warning is justified. Public Key Pinning Extension for HTTP is coming, I'll will write a more satisfactory answer when that more satisfactory solution (for the web, not only for Firefox) is out. – VicAche May 17 '15 at 18:34
  • Non-intrusive spurious warnings should be OK. One can just ignore them most of the time. But if, for example, while accessing free internet over open Wi-Fi you see some unexpected certificate change when using internet bank (when the certificate usually stable), one can pay additional attention. – Vi. May 17 '15 at 19:24

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.