Dodaci za preglednik Firefox
  • Proširenja
  • Teme
    • za Firefox
    • Rječnici i jezični paketi
    • Druge stranice preglednika
    • Dodaci za Android
Prijavi se
Pregled za Anti-MitM TLSCAPTCHA (PoC)

Anti-MitM TLSCAPTCHA (PoC) od Anon

This extension uses your CAPTCHA answer to verify TLS certificate that you get from website you're visiting. Warning: you can see it in action only if a website has server-side part of such verification scheme.

3 (2 reviews)3 (2 reviews)
12 Users12 Users
Za korištenje ovog proširenja trebat ćeš Firefox
Preuzmi Firefox i nabavi proširenje
Preuzmi datoteku

Metapodaci proširenja

Informacije o ovom proširenju
Every time when you solve CAPTCHA, the CAPTCHA answer can be used as a common secret for a short time. Mainly, It can be used to prevent TLS certificate spoofing.

Since ordinary web pages (and their JavaScript) doesn't have access to TLS certificate data, I was have to make this extension. Actually it does the following:

let clientsideDigest = <Digest of TLS certificate that you get from website you're visiting>;
let yourAnswer = <Your CAPTCHA answer>;
let resultDigest = PBKDF2(clientsideDigest, "SHA-512", yourAnswer);
//Where yourAnswer is PKBDF2 salt.
cookies["TLSCaptcha"] = representAsHexString(resultDigest);

To see it in action, you need to visit a website that have server-side implementation of this scheme.
At the moment of publishing this extension, there is no server-side implementations. If you want to make your own, please look into source code for details.

New additional featue: you can use this addon to establish additional encryption. See source code for details.
Komentari razvijatelja
At the moment of publishing this extension, there is no server-side implementations. If you want to make your own, please look into source code for details. It's very simple to understand.

WARNING: this extension cannot be ported to Chromium-based browsers due to API limitations.
Rated 3 by 2 reviewers
Prijavi se i ocijeni ovo proširenje
Još nema ocjena

Ocjena je spremljena

5
1
4
0
3
0
2
0
1
1
Pročitaj 2 recenzije
Dozvole i podaciSaznaj više

Potrebne dozvole:

  • Pristupiti karticama preglednika
  • Pristupiti tvojim podacima za sve web stranice
Daljnje informacije
Verzija
1.0.3
Veličina
13,92 KB
Zadnje aktualiziranje
prije godinu (17. svi. 2024)
Povezane kategorije
  • Privatnost i sigurnost
Licenca
Samo GNU Opća javna licenca v3.0
Povijest verzija
  • Pogledaj sve verzije
Dodaj u zbirku
Prijavi ovaj dodatak
Napomene o izdanju za 1.0.3
~ Content script is no more.
~ Works properly with 'insecure context'.
~ Breaking change: only PBKDF2 is supported as verification hash.
+ Experimental feature: encrypted content support.
Daljnja proširenja od Anon
  • Još nema ocjena

  • Još nema ocjena

  • Još nema ocjena

  • Još nema ocjena

  • Još nema ocjena

  • Još nema ocjena

Idi na početnu stranicu Mozille

Dodaci

  • Informacije
  • Blog za Firefox dodatke
  • Radionica za proširenja
  • Centar za programere
  • Pravila za programere
  • Blog zajednice
  • Forum
  • Prijavi grešku
  • Priručnik za recenziranje

Preglednici

  • Desktop
  • Mobile
  • Enterprise

Proizvodi

  • Browsers
  • VPN
  • Relay
  • Monitor
  • Pocket
  • Bluesky (@firefox.com)
  • Instagram (Firefox)
  • YouTube (firefoxchannel)
  • Privatnost
  • Kolačići
  • Pravne informacije

Osim gdje je drugačije navedeno, sadržaj ove stranice licenciran je pod licencom Creative Commons Imenovanje dijeli pod istim uvjetima verzija 3.0 ili novijoj.