Author: intrigeri Date: To: The Tails public development discussion list Subject: Re: [Tails-dev] [internal]1st week post-release help desk report
Hi,
u: >>> and a user reported that with firefox 55, downloading the IOS with the
>>> add-on doesn't work due to a certificate mismatch (I still need to try
>>> to reproduce before opening a ticket.
>>
>> nor that. > I've seen a screenshot from this user (puh, don't ask me where that
> was)
IIRC we've received it on tails@. Sadly I've deleted that email
already :/
> and the URL was a mirror (it was 13.dl.amnesia.boum.org in the image),
> which we had switched to HTTPS in the meantime and changed its URL. So I
> suppose that this was the problem.
The commit that switches this mirror to HTTPS dates back from June 8,
so either it was pushed only later (after the 3.0 release), or we have
another problem.
But wait, IIRC the HTTPS error was about *pinning*, and the only
pinning our add-on does is for downloading the IDF and mirror pool
info from our website. That might be another hint that suggests the
problem at hand is unrelated to the content of mirrors.json.
Perhaps these users were "simply" man-in-the-middle'd.
