Hacker News new | ask | show | jobs
by userisme 4070 days ago
Is anyone else getting a message that says: Your connection is not private

Attackers might be trying to steal your information from blog.torproject.org (for example, passwords, messages, or credit cards).

ReloadHide advanced blog.torproject.org normally uses encryption to protect your information. When Chrome tried to connect to blog.torproject.org this time, the website sent back unusual and incorrect credentials. Either an attacker is trying to pretend to be blog.torproject.org, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Chrome stopped the connection before any data was exchanged.

You cannot visit blog.torproject.org right now because the website uses HSTS. Network errors and attacks are usually temporary, so this page will probably work later.

NET::ERR_CERT_COMMON_NAME_INVALID

7 comments

If you are on OSX, recent updates may have broken some of your certs: https://security.stackexchange.com/questions/85830/why-is-sy...
I don't get this warning. Is your ISP/company/hotel/OEM/... MITMing your connections?

I get a certificate with SHA1 fingerprint DE 20 3D 46 FD C3 68 EB BA 40 56 39 F5 FA FD F5 4E 3A 1F 83

No, and ssllabs seems to think the cert is fine as well. https://www.ssllabs.com/ssltest/analyze.html?d=blog.torproje...
Can you post info about the cert you're getting? On Chrome, this is done by clicking the lock icon by the https, selecting the "Connection" tab, then clicking the "Certificate Information" link. As was pointed out elsewhere, be aware that this may expose information about your network.
Safari, Chrome, Firefox works fine. Can you share the certificate this site serves to you?
Completely valid question but OP should know this may expose where they work and/or their location. That said I would be interested in seeing the cert.
For the record, I'm getting the same error. I'm on a company network, so I can only assume it's being blocked by whatever blocks (or doesn't block) porn.
Firefox on Windows. No issues.