<p>The certificate for www.bitaddress.org is issued by PositiveSSL. Chrome trusts them (PositiveSSL), firefox does not.</p>

<p>There are an awful lot of issuers, and different browsers are bound to have slightly different lists.</p>

<p>If you trust them or not is up to you. If you trust Chrome's security, then you can trust that certificate.</p>

<p>If you "add exception", then BEFORE confirm security exception, you can "View..."; you can check the fingerprint (SHA1 &amp; MD5), and if they match, then the security is the same between Chrome and Firefox (not necessarily good, just the same between the two browsers). If they are different, then someone is doing something SERIOUSLY FLAKEY!</p>

<p>Of course, you shouldn't trust a website that throws up a warning, just because some guy on the internet told you to :)</p>

CC BY-SA 3.0
2014-01-12T07:07:29.060Z
2014-01-12T07:13:36.903Z
2014-01-12T07:13:36.903Z
AMADANON Inc.
<p>When I tried accessing <a href="https://www.bitaddress.org" rel="nofollow noreferrer">https://www.bitaddress.org</a> with Firefox, I was redirected to <code>https://www.bitaddress.org/bitaddress.org-v2.7.2-SHA1-364542f1ccc5777c79aebb1692a6265cf3e42e7e.html</code> and got a security certificate warning: </p>

<p><img src="https://i.sstatic.net/G8Adw.png" alt="enter image description here"></p>

<p>The same redirection happened with Chrome, without any security warnings. </p>

<p>Is there a real security problem with bitaddress.org? </p>

<security><offline><bitaddress.org>
Is bitaddress.org compromised?
Adam Matan
# Is bitaddress.org compromised?

(Asked by: username_0 on 2014-01-12)

When I tried accessing <https://www.bitaddress.org> with Firefox, I was redirected to `https://www.bitaddress.org/bitaddress.org-v2.7.2-SHA1-364542f1ccc5777c79aebb1692a6265cf3e42e7e.html` and got a security certificate warning:

![enter image description here](https://i.sstatic.net/G8Adw.png)

The same redirection happened with Chrome, without any security warnings.

Is there a real security problem with bitaddress.org?

**Tags:** security, offline, bitaddress.org


---

## 1 answers

### Answer by username_1 on 2014-01-12. Score: 3 | Accepted answer

The certificate for www.bitaddress.org is issued by PositiveSSL. Chrome trusts them (PositiveSSL), firefox does not.

There are an awful lot of issuers, and different browsers are bound to have slightly different lists.

If you trust them or not is up to you. If you trust Chrome's security, then you can trust that certificate.

If you "add exception", then BEFORE confirm security exception, you can "View..."; you can check the fingerprint (SHA1 & MD5), and if they match, then the security is the same between Chrome and Firefox (not necessarily good, just the same between the two browsers). If they are different, then someone is doing something SERIOUSLY FLAKEY!

Of course, you shouldn't trust a website that throws up a warning, just because some guy on the internet told you to :)


---

