This blog post provides details over the SSL/TLS certificate for the Mailfence knowledge base (KB).
A modern browser should automatically check the validity of the Mailfence KB SSL/TLS certificate and alert you if it detects something untrustworthy. In case an adversary succeeds in spoofing Mailfence KB website (using a rogue SSL certificate), you will be able to detect such an (AiTM) attack by manually checking Mailfence KB website SSL/TLS certificate fingerprints.
Mailfence KB SSL/TLS certificate fingerprints/thumbprints (valid until 16/May/2024) are:
SHA1 fingerprint:
6C:95:5A:08:18:4C:7C:65:ED:A6:5C:3F:E3:B2:68:C3:9D:5E:19:E2
SHA-256 fingerprint:
9E:FF:63:14:09:D3:45:24:35:B4:7F:4F:F8:10:FD:D5:89:7D:0D:CF:7D:78:04:03:71:CE:57:45:76:22:A4:6C
If this matches what you see in your browser, then you know you are communicating with the right Mailfence KB website and using the correct public key to encrypt your sensitive information and only Mailfence KB can decrypt it.
Next update date: May 2024
Guidelines:
- For Chrome:
- Click on the lock button in front of the URL.
- Click on the Certificate.
- In Details tab, show All and verify the Thumbprint matches the one above (SHA1).
- For Firefox:
- Click on the lock button in front of the URL, then Connection secure and click on More Information.
- Go to Security and click on View Certificate.
- In General, verify the Fingerprints (SHA1 & SHA-256) matches the one’s above.
- For Safari:
- Click on the lock button in front of the URL.
- Select Show Certificate, in Details scroll to the bottom of the page.
- Verify the Fingerprints (SHA1 & SHA-256) matches the one’s above.
Note: Make sure, in your browser, you are looking at the leaf certificate (kb.mailfence.com). This certificate does not cover mailfence.com and blog.mailfence.com domain names.
At Mailfence – a secure and private email service, we believe in following good security practices, to contribute in providing you a secure and private email solution. Learn more about who we are.
