Modules pour le navigateur Firefox
  • Extensions
  • ThĂšmes
    • pour Firefox
    • Dictionnaires et paquetages linguistiques
    • Sites pour les autres navigateurs
    • Modules pour Android
Connexion
Aperçu de Certificate Watch

Certificate Watch par PilzAdam

Warns when TLS certificates change over time.

5 (2 reviews)5 (2 reviews)
61 utilisateurs·trices61 utilisateurs·trices
Vous avez besoin de Firefox pour utiliser cette extension
TĂ©lĂ©charger Firefox et obtenir l’extension
Télécharger le fichier

MĂ©tadonnĂ©es de l’extension

Captures d’écran
On first visit, a new certificate is added to the local storage automatically.The certificate from the website matches the one stored earlier.The certificate from the website is not the same as the stored version. The changes are displayed and there is an option to accept this new certificate into the store.The storage page shows information about stored certificates.
À propos de cette extension
This add-on watches over the TLS certificates that websites present to you and warns when the certificate for a domain changes. If a new domain is encountered, its certificate is added to the local storage of this add-on. Future connections to that domain will check that the certificate is still the same as in the local storage.

The add-on icon can display three possible states:
  • Stored: The certificate of the domain is the same as the one in storage.
  • New: There is no previous certificate stored for this domain; the new one is automatically added to the storage.
  • Changed: The certificate of the connection is different to the one in storage. This means, that the certificate of the website was changed. A click on the add-on icon will display more information and has the option to accept the new certificate into the local storage (overriding the old certificate).

This add-on can be a countermeasure to attacks where the attacker has a valid certificate for the attacked website. Changes to the certificate that the browser happily accepts can no longer go unnoticed. The goal of this countermeasure is simply to make the user aware that something has changed; user intervention is still required.

Be aware of the following points:
  • This add-on does not check that certificates are valid. The browser does this already. This add-on only compares certificates of connections that the browser deems safe.
  • This add-on does not block any requests where the certificate has changed. It only informs the user of this fact. If the add-on displays a changed certificate, it is up to the user to decide what to do (e.g. leave the page, accept the certificate, or something else).
  • This add-on implements Trust On First Use (TOFU): the first certificate that is encountered for a domain is automatically trusted. Only future changes will raise a warning.
  • Users of this add-on should already have basic knowledge of how certificates for TLS connections work. The warnings generated by this add-on only make sense if the user can correctly interpret them.
  • This add-on does not work in private browsing mode (see Firefox bug 1329304).
Noté 5 par 2 personnes
Connectez-vous pour noter cette extension
Il n’y a aucune note pour l’instant

Le nombre d’étoiles est enregistrĂ©

5
2
4
0
3
0
2
0
1
0
Lire les 2 critiques
Autorisations et donnéesEn savoir plus

Autorisations nécessaires :

  • AccĂ©der Ă  vos donnĂ©es pour tous les sites web

Autorisations facultatives :

  • AccĂ©der aux onglets du navigateur
Plus d’informations
Liens du module
  • Page d’accueil
  • Site d’assistance
Version
1.12.0
Taille
48,46 Ko
DerniĂšre mise Ă  jour
il y a 6 ans (1 déc. 2019)
Catégories associées
  • SĂ©curitĂ© et vie privĂ©e
Licence
Apache License 2.0
Historique des versions
  • Voir toutes les versions
Ajouter Ă  la collection
Signaler ce module
Notes de version pour la version 1.12.0
  • Added setting that defines which fields of certificates are checked
  • Added buttons to storage to prune old (unseen for a long time) or expired certificates
Plus de modules créés par PilzAdam
  • Il n’y a aucune note pour l’instant

  • Il n’y a aucune note pour l’instant

  • Il n’y a aucune note pour l’instant

  • Il n’y a aucune note pour l’instant

  • Il n’y a aucune note pour l’instant

  • Il n’y a aucune note pour l’instant

Aller à la page d’accueil de Mozilla

Modules complémentaires

  • À propos
  • Blog des modules complĂ©mentaires Firefox
  • Atelier sur les extensions
  • PĂŽle dĂ©veloppeur
  • Politiques Ă  destination des dĂ©veloppeurs
  • Blog de la communautĂ©
  • Forum
  • Signaler un problĂšme
  • Guide de revue

Navigateurs

  • Desktop
  • Mobile
  • Enterprise

Produits

  • Browsers
  • VPN
  • Relay
  • Monitor
  • Pocket
  • Bluesky (@firefox.com)
  • Instagram (Firefox)
  • YouTube (firefoxchannel)
  • ConfidentialitĂ©
  • Cookies
  • Mentions lĂ©gales

Sauf mention contraire, le contenu de ce site est disponible sous licence Creative Commons Attribution Share-Alike v3.0 ou toute version supérieure.