TLSA icon goes green on Firefox
Replication procedure:
- Go to page https://dating.wtmnd.nl:10443/ and accept certificate.
- Go to page https://dating.wtmnd.nl The TLSA icon will get green before you can accept the certificate.
Correct behaviour should be: The icon should get red when accepting the certificate for https://dating.wtmnd.nl
The problem occurs on Fedora, Gentoo, Ubuntu, OS X. Windows does not seem to be affected.
Note: The page https://dating.wtmnd.nl has a TLSA record tied to the certificates of the page https://dating.wtmnd.nl:10443 . The browser appears to pass a wrong certificate chain to the plug-in in the moment when the user is asked to confirm a unknown certificate.
Notification
It can be problem of firefox implementation. This anomaly was not observed on the newest version of MF.