Pengaya Peramban Firefox
  • Ekstensi
  • Tema
    • untuk Firefox
    • Kamus & Paket Bahasa
    • Situs Peramban Lainnya
    • Pengaya untuk Android
Masuk
Pratinjau dari Anti-MitM TLSCAPTCHA (PoC)

Anti-MitM TLSCAPTCHA (PoC) oleh Anon

This extension uses your CAPTCHA answer to verify TLS certificate that you get from website you're visiting. Warning: you can see it in action only if a website has server-side part of such verification scheme.

3 (2 reviews)3 (2 reviews)
12 Users12 Users
Anda memerlukan Firefox untuk menggunakan ekstensi ini
Unduh Firefox dan dapatkan ekstensinya
Unduh berkas

Metadata Ekstensi

Tentang ekstensi ini
Every time when you solve CAPTCHA, the CAPTCHA answer can be used as a common secret for a short time. Mainly, It can be used to prevent TLS certificate spoofing.

Since ordinary web pages (and their JavaScript) doesn't have access to TLS certificate data, I was have to make this extension. Actually it does the following:

let clientsideDigest = <Digest of TLS certificate that you get from website you're visiting>;
let yourAnswer = <Your CAPTCHA answer>;
let resultDigest = PBKDF2(clientsideDigest, "SHA-512", yourAnswer);
//Where yourAnswer is PKBDF2 salt.
cookies["TLSCaptcha"] = representAsHexString(resultDigest);

To see it in action, you need to visit a website that have server-side implementation of this scheme.
At the moment of publishing this extension, there is no server-side implementations. If you want to make your own, please look into source code for details.

New additional featue: you can use this addon to establish additional encryption. See source code for details.
Komentar pengembang
At the moment of publishing this extension, there is no server-side implementations. If you want to make your own, please look into source code for details. It's very simple to understand.

WARNING: this extension cannot be ported to Chromium-based browsers due to API limitations.
Rated 3 by 2 reviewers
Masuk untuk menilai ekstensi ini
Belum ada peringkat

Peringkat bintang tersimpan

5
1
4
0
3
0
2
0
1
1
Baca semua 2 ulasan
Permissions and dataPelajari lebih lanjut

Required permissions:

  • Mengakses tab peramban
  • Mengakses data Anda pada semua situs
Informasi lebih lanjut
Versi
1.0.3
Ukuran
13,92 KB
Terakhir dimutakhirkan
setahun yang lalu (17 Mei 2024)
Kategori Terkait
  • Keamanan dan Privasi
Lisensi
Hanya GNU General Public License v3.0
Riwayat Versi
  • Lihat semua versi
Tambahkan ke koleksi
Laporkan pengaya ini
Catatan rilis untuk 1.0.3
~ Content script is no more.
~ Works properly with 'insecure context'.
~ Breaking change: only PBKDF2 is supported as verification hash.
+ Experimental feature: encrypted content support.
Ekstensi lain dari Anon
  • Belum ada peringkat

  • Belum ada peringkat

  • Belum ada peringkat

  • Belum ada peringkat

  • Belum ada peringkat

  • Belum ada peringkat

Ke beranda Mozilla

Pengaya

  • Tentang
  • Blog Pengaya Firefox
  • Lokakarya Ekstensi
  • Pusat Pengembang
  • Kebijakan Pengembang
  • Blog Komunitas
  • Forum
  • Laporkan kutu
  • Panduan Ulasan

Peramban

  • Desktop
  • Mobile
  • Enterprise

Produk

  • Browsers
  • VPN
  • Relay
  • Monitor
  • Pocket
  • Bluesky (@firefox.com)
  • Instagram (Firefox)
  • YouTube (firefoxchannel)
  • Privasi
  • Kuki
  • Legal

Terkecuali saat dicatat berbeda, konten dalam situs ini dilisensikan di bawah Creative Commons Attribution Share-Alike License v3.0 atau versi lain yang lebih baru.