I know that I can simply make my own private certificate authority that only I and my family trust. But is there some public provider like letsencrypt that is in a free-er part of the world than the US?

    • T4V0@lemmy.ptEnglish
      0·
      19 hours ago

      Orion browser (maybe safari?) on iOS detected the revoked certificate, and asked me to confirm before accessing the website while warning about the dangers.

      • Passerby6497@lemmy.worldEnglish
        0·
        17 hours ago

        Does regular safari show the same prompt? Afaik, browsers on iOS are safari reskins, so I’m curious if they added his cert in directly again, or if the onion browser actually follows standards the os browser doesn’t.

        • T4V0@lemmy.ptEnglish
          0·
          14 hours ago

          Yes, but safari doesn’t even let me ignore the warning, it has a explanation in detail, and only allows closing the website.

            • T4V0@lemmy.ptEnglish
              0·
              10 hours ago

              Maybe there’s a special case for local subnets?

              Here’s what shows up for me (in portuguese):

              Safari browser invalid certificate warning page.

              Clicking on more details, only allows me to check the certificate:

              Safari browser detailed information for invalid certificate warning.

              Here’s the translated details:

              Safari warns you when a website has an invalid certificate. This can happen if an attacker has compromised your connection. For your protection, you cannot visit this site. You can check later to see if the problem has been solved. You can also contact the site owner to report this error.

              To learn more, you can see the certificate.

              Said certificate:

              iOS invalid certificate information.

              Edit: on the latest iOS version (27) btw.

              • dogdeanafternoon@lemmy.caEnglish
                0·
                8 hours ago

                Thanks for the proof! I stand corrected! I see basically the same but after the view link there is another think that bypasses it.

                Must be difference between expired vs compromised cert.

      • Passerby6497@lemmy.worldEnglish
        0·
        22 hours ago

        Most browsers don’t, hence my calling revocation a joke.

        So many in this thread are up in arms about something the majority of browsers don’t care about and have actively ignored for as long as I can recall