I know that I can simply make my own private certificate authority that only I and my family trust. But is there some public provider like letsencrypt that is in a free-er part of the world than the US?

  • Passerby6497@lemmy.world
    link
    fedilink
    English
    arrow-up
    2
    ·
    9 hours ago

    Does regular safari show the same prompt? Afaik, browsers on iOS are safari reskins, so I’m curious if they added his cert in directly again, or if the onion browser actually follows standards the os browser doesn’t.

    • T4V0@lemmy.pt
      link
      fedilink
      English
      arrow-up
      2
      ·
      7 hours ago

      Yes, but safari doesn’t even let me ignore the warning, it has a explanation in detail, and only allows closing the website.

        • T4V0@lemmy.pt
          link
          fedilink
          English
          arrow-up
          2
          ·
          3 hours ago

          Maybe there’s a special case for local subnets?

          Here’s what shows up for me (in portuguese):

          Safari browser invalid certificate warning page.

          Clicking on more details, only allows me to check the certificate:

          Safari browser detailed information for invalid certificate warning.

          Here’s the translated details:

          Safari warns you when a website has an invalid certificate. This can happen if an attacker has compromised your connection. For your protection, you cannot visit this site. You can check later to see if the problem has been solved. You can also contact the site owner to report this error.

          To learn more, you can see the certificate.

          Said certificate:

          iOS invalid certificate information.

          Edit: on the latest iOS version (27) btw.

          • dogdeanafternoon@lemmy.ca
            link
            fedilink
            English
            arrow-up
            1
            ·
            42 minutes ago

            Thanks for the proof! I stand corrected! I see basically the same but after the view link there is another think that bypasses it.

            Must be difference between expired vs compromised cert.