[HTTPS-Everywhere] bbc.co.uk attempts to use user installed certificates?

[Eitan Adler]

On 14 March 2014 00:14, Daniel Kahn Gillmor <dkg at fifthhorseman.net> wrote:
> On 03/13/2014 11:39 PM, Eitan Adler wrote:
>> This is the output of LiveHTTPHeaders when I see the popup.  I hit
>> cancel when the request came up.  I don't see the CertificateRequest
>> although I may be blind ;)
>
> The output you sent shows HTTP headers, but CertificateRequest message
> is part of the TLS layer.  There may well be other ways to capture the
> CertificateRequest message, but a network packet capture really is a
> reasonable suggestion to get the data that you want to examine.

I knew that.  I really shouldn't be trying this after midnight.  I'll
get you a dump in the next few days, I hope.


-- 
Eitan Adler