[HTTPS-Everywhere] bbc.co.uk attempts to use user installed certificates?

Daniel Kahn Gillmor dkg at fifthhorseman.net
Thu Mar 13 21:14:33 PDT 2014


On 03/13/2014 11:39 PM, Eitan Adler wrote:
> This is the output of LiveHTTPHeaders when I see the popup.  I hit
> cancel when the request came up.  I don't see the CertificateRequest
> although I may be blind ;)

The output you sent shows HTTP headers, but CertificateRequest message
is part of the TLS layer.  There may well be other ways to capture the
CertificateRequest message, but a network packet capture really is a
reasonable suggestion to get the data that you want to examine.

Regards,

	--dkg

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 1010 bytes
Desc: OpenPGP digital signature
URL: <https://lists.eff.org/pipermail/https-everywhere/attachments/20140314/82d193a6/attachment.sig>


More information about the HTTPS-Everywhere mailing list