Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.os.linux.networking > #3379

Re: I wish I understood SSL Certificates better when they ask

Cross-posted to 3 groups.

Show all headers | View raw

Bit Twister <BitTwister@mouse-potato.com> wrote in
slrnmnn663.o9l.BitTwister@wb.home.test:

> I wish you knew how to cross post.  :-(

I'm not sure what I did wrong, as I "think" I know how to 
crosspost. I just didn't set any followup newsgroup.

Is that what you mean by not knowing how to crosspost?
Did you want me to set a followup newsgroup?

> I would abort.

I did abort.

But I don't understand why it took the bank 3 days to realize
their certificate expired, and, more to my point, how the *new*
updated certificate is supposed to get into my browser.

> You would think the customer's would call and ask about the certificate.
> Did you call the security department. I would.

After my third call to BofA to no avail, I had posted the question here.
(See details in my prior post.)

> $ nslookup sso-fi.bankofamarica.com

You have a typo there.
It's "america" (not amarica).

$ nslookup sso-fi.bankofamarica.com
Server:         192.168.1.1
Address:        192.168.1.1#53

Non-authoritative answer:
Name:   sso-fi.bankofamarica.com
Address: 69.162.80.52

$ ^amarica^america
nslookup sso-fi.bankofamerica.com
Server:         192.168.1.1
Address:        192.168.1.1#53

Non-authoritative answer:
sso-fi.bankofamerica.com        canonical name = saml-bac.onefiserv.com.
saml-bac.onefiserv.com  canonical name = saml-bac.gslb.onefiserv.com.
Name:   saml-bac.gslb.onefiserv.com
Address: 208.235.248.157

> $ whois bankofamarica.com

Again, it's "america" (not amarica).

$ whois bankofamerica.com
   Domain Name: BANKOFAMERICA.COM
   Registrar: CSC CORPORATE DOMAINS, INC.
  
> Couple of places where the problem is on your system could be the
> router, your dns resolver, in memory malware, malware installed on the
> system or the browser's dns cache/bookmarks or you mistype the BOA url.

I was already logged into the BofA account, so, it couldn't have been
a typo on my part. It failed when I hit the billpay button.

In the end, their certificate had expired. But, what I don't understand
is how I'm supposed to know what to do based on the information presented
to me of the certificate having expired 3 days ago.

Also, how does the *new* certificate get to me?

I didn't explicitly load it (but I did see something briefly happening
in the background when I successfully logged in a few minutes ago).

What happened in the background?
Did BofA somehow transfer the new certificate to me under the covers?

> My bank suggests you always exit the browser before attempting to log
> into the web site. That way the browser's dns cache will not have
> poisoned by some infected web site you surfed before doing bank work.
> If some malware modified your browser bookmark for BOA, you are screwed.

My browser is set to dump everything upon each invocation, so, the
chances of that being the problem is slim (but it's a good suggestion).

> Personally I use AIDE, Rkhunter, and unhide.

$ unhide
The program 'unhide' is currently not installed. 
You can install it by typing:
sudo apt-get install unhide

$ aide
The program 'aide' can be found in the following packages:
 * aide
 * aide-dynamic
 * aide-xen
Try: sudo apt-get install <selected package>

$ rkkhunter
No command 'rkkhunter' found, did you mean:
 Command 'rkhunter' from package 'rkhunter' (universe)
rkkhunter: command not found

I'll look them up and decide if I want to install them.
Thank you for the suggestions.

> The other two failure points are the router and your pc dns resolver.

I don't see how the router is involved other than it has the DNS setup.

Both my primary and secondary DNS servers are typical:
Primary DNS server = 8.8.8.8 
Secondary DNS server = 8.8.4.4

I'm not sure how to test that this is truly the case though, but, 
that's what I had set up in my home broadband router long ago.

Back to comp.os.linux.networking | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

I wish I understood SSL Certificates better when they ask Werner Obermeier <spamfreewob@arcor.de> - 2015-06-12 23:36 +0000
  Re: I wish I understood SSL Certificates better when they ask Wildman <best_lay@yahoo.com> - 2015-06-12 23:51 +0000
    Re: I wish I understood SSL Certificates better when they ask Werner Obermeier <spamfreewob@arcor.de> - 2015-06-13 05:21 +0000
  Re: I wish I understood SSL Certificates better when they ask Bit Twister <BitTwister@mouse-potato.com> - 2015-06-13 02:41 +0000
    Re: I wish I understood SSL Certificates better when they ask Werner Obermeier <spamfreewob@arcor.de> - 2015-06-13 05:42 +0000
      Re: I wish I understood SSL Certificates better when they ask Werner Obermeier <spamfreewob@arcor.de> - 2015-06-13 23:24 +0000
  Re: I wish I understood SSL Certificates better when they ask Werner Obermeier <spamfreewob@arcor.de> - 2015-06-13 05:13 +0000
    Re: I wish I understood SSL Certificates better when they ask Richard Kettlewell <rjk@greenend.org.uk> - 2015-06-13 10:01 +0100
    Re: I wish I understood SSL Certificates better when they ask Thomas Richter <thor@math.tu-berlin.de> - 2015-06-13 13:21 +0200
      Re: I wish I understood SSL Certificates better when they ask Werner Obermeier <spamfreewob@arcor.de> - 2015-06-13 23:21 +0000
    Re: I wish I understood SSL Certificates better when they ask Ian Zimmerman <itz@buug.org> - 2015-06-13 10:46 -0700
    Re: I wish I understood SSL Certificates better when they ask Werner Obermeier <spamfreewob@arcor.de> - 2015-06-13 23:18 +0000
      Re: I wish I understood SSL Certificates better when they ask "David W. Hodgins" <dwhodgins@nomail.afraid.org> - 2015-06-13 20:30 -0400
        Re: I wish I understood SSL Certificates better when they ask Werner Obermeier <spamfreewob@arcor.de> - 2015-06-14 02:12 +0000
          Re: I wish I understood SSL Certificates better when they ask "David W. Hodgins" <dwhodgins@nomail.afraid.org> - 2015-06-13 22:43 -0400
      Re: I wish I understood SSL Certificates better when they ask William Unruh <unruh@invalid.ca> - 2015-06-14 00:40 +0000
        Re: I wish I understood SSL Certificates better when they ask Werner Obermeier <spamfreewob@arcor.de> - 2015-06-14 02:12 +0000
          Re: I wish I understood SSL Certificates better when they ask "David W. Hodgins" <dwhodgins@nomail.afraid.org> - 2015-06-13 22:39 -0400
            Re: I wish I understood SSL Certificates better when they ask William Unruh <unruh@invalid.ca> - 2015-06-14 02:49 +0000
      Re: I wish I understood SSL Certificates better when they ask Werner Obermeier <spamfreewob@arcor.de> - 2015-06-14 20:05 +0000
        Re: I wish I understood SSL Certificates better when they ask Werner Obermeier <spamfreewob@arcor.de> - 2015-06-14 22:49 +0000
          Re: I wish I understood SSL Certificates better when they ask Richard Kettlewell <rjk@greenend.org.uk> - 2015-06-15 00:31 +0100

csiph-web