At some point today my email client warned about an smtp certificate change of self signed certs. I took a screenshot of the certificate fingerprints and refused the connection because it does not seem to make sense.
The server in question has a valid https certificate, but on their website nothing about their smtp cert, nor about it having changed.
Now if they answer me that they didn't change it, this is probably an ssl injection and I would like to send them details including which exit node did this.
It would also allow me to compare with tested exit nodes like this service: xqz3u5drneuzhaeo.onion/users/badtornodes/
I must have a default tor logging settup on linux. Where can I find which exit node I was connected to at a given time?
/var/log/tor/log seems to have only warnings and upwards in it...