Delivery-Date: Mon, 22 Sep 2014 06:21:19 -0400
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.9 required=5.0 tests=BAYES_00,RCVD_IN_DNSWL_MED,
	RP_MATCHES_RCVD autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id F39B01E065E;
	Mon, 22 Sep 2014 06:21:17 -0400 (EDT)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id 853D42FF1A;
	Mon, 22 Sep 2014 10:21:13 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id EFEF12FF23
 for <tor-talk@lists.torproject.org>; Mon, 22 Sep 2014 10:21:09 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at eugeni.torproject.org
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id EWL4hQKvjnta for <tor-talk@lists.torproject.org>;
 Mon, 22 Sep 2014 10:21:09 +0000 (UTC)
Received: from bilestoad.getfoxyproxy.org (bilestoad.getfoxyproxy.org
 [162.243.99.25])
 by eugeni.torproject.org (Postfix) with ESMTP id D389E2FF16
 for <tor-talk@lists.torproject.org>; Mon, 22 Sep 2014 10:21:09 +0000 (UTC)
Received: from [0.0.0.0] (exit2.telostor.ca [62.210.74.186])
 by bilestoad.getfoxyproxy.org (Postfix) with ESMTPSA id 32064123C6B
 for <tor-talk@lists.torproject.org>; Mon, 22 Sep 2014 10:20:48 +0000 (UTC)
Message-ID: <541FF7CB.9070402@torproject.org>
Date: Mon, 22 Sep 2014 10:19:55 +0000
From: Georg Koppen <gk@torproject.org>
MIME-Version: 1.0
To: tor-talk@lists.torproject.org
References: <541AB66B.7040105@web.de>
In-Reply-To: <541AB66B.7040105@web.de>
Subject: Re: [tor-talk] Unreachable address
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: multipart/mixed; boundary="===============6990480376854314633=="
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--===============6990480376854314633==
Content-Type: multipart/signed; micalg=pgp-sha512;
 protocol="application/pgp-signature";
 boundary="pxOLUdVEuS39TGIGnI4lc3Li3HxOESV0w"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--pxOLUdVEuS39TGIGnI4lc3Li3HxOESV0w
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

Hartmut Haase wrote:
> Hi,
> when I try to open www.stayfriends.de I get the following message:
>=20
> Dieser Verbindung wird nicht vertraut
>=20
> Sie haben TorBrowser angewiesen, eine gesicherte Verbindung zu
> www.stayfriends.de aufzubauen, es kann aber nicht =C3=BCberpr=C3=BCft w=
erden, ob
> die Verbindung sicher ist.
>=20
> Wenn Sie normalerweise eine gesicherte Verbindung aufbauen, weist sich
> die Website mit einer vertrauensw=C3=BCrdigen Identifikation aus, um zu=

> garantieren, dass Sie die richtige Website besuchen. Die Identifikation=

> dieser Website dagegen kann nicht best=C3=A4tigt werden.
> Was sollte ich tun?
>=20
> Falls Sie f=C3=BCr gew=C3=B6hnlich keine Probleme mit dieser Website ha=
ben, k=C3=B6nnte
> dieser Fehler bedeuten, dass jemand die Website f=C3=A4lscht. Sie sollt=
en in
> dem Fall nicht fortfahren.
>=20
> www.stayfriends.de verwendet ein ung=C3=BCltiges Sicherheitszertifikat.=
 Dem
> Zertifikat wird nicht vertraut, weil keine Zertifikatsausstellerkette
> angegeben wurde. (Fehlercode: sec_error_unknown_issuer)
>=20
> The last paragraph tells the reason. The owner of the page tells me tha=
t
> his certificate is o. k.
> Who is right, and who is wrong?

Hard to say but the problem is that the PositiveSSL CA 2 is not in the
trust store in Firefox based browsers. That's why your issue is showing
up. The owner of the page is probably not using/not testing with Firefox
and thus not aware of it.

Georg


--pxOLUdVEuS39TGIGnI4lc3Li3HxOESV0w
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=cBZb
-----END PGP SIGNATURE-----

--pxOLUdVEuS39TGIGnI4lc3Li3HxOESV0w--

--===============6990480376854314633==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

--===============6990480376854314633==--

