Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.os.linux.networking > #4072

Re: What do do? (forums.mtbr.com uses an invalid security certificate)

Show all headers | View raw

On 2017-06-08, Dan Purgert <dan@djph.net> wrote:
> harry newton wrote:
>> I just want to have a normal safe encrypted connection to this web site:
>>  https://forums.mtbr.com/
>>
>> But I get this error which is what I'm asking you about:
>> http://i.cubeupload.com/pNM36t.gif
>>
>> The error in words is:
>>  Your connection is not secure.
>>  The owner of forums.mtbr.com has configured their website improperly.
>>  To protect your information from being stolen, Tor Browser has
>>  not connected to this website.
>>  [Advanced]
>>  forums.mtbr.com uses an invalid security certificate.
>>  The certificate is only valid for the following names:
>>  cloudfront.net,*.cloudfront.net
>>  Error code: SSL_ERROR_BAD_CERT_DOMAIN
>>  [Add Exception...]
>>
>> Should I press "Add Exception"?
>> All I want is to log into the site in a secure encrypted way.
>
> Contact the forum admin -- seems they're using cloudfront as a CDN /
> loadbalancer, but the certs are misconfigured.
>
>>
>> I'm not sure what is the RIGHT thing to do.

It is neither a moral or a legal thing. If you want your connection to
be safe, do not connect.If you want to connect more than you want
security, then make an exception. It is entirely up to you.
>
> It's a bit of a grey area, honestly.
>
>>
>> What I did was press the button to download the certificate.
>> Did I need to do that?

And how do you know it was a valid cert.?


>
> Probably - depends on the actual browser (most just allow you to add an
> exception on a temporary or permanent basis).
>
>>
>> Did I do the right steps?
>> How do I undo what I did if not?
>
> For some value of "right".  Revoking the exception depends on the what
> the "base" browser is (i.e. Firefox or Chrome), as they each have
> slightly different methods for revoking the exception.
>
>>
>> Can someone just explain what is going on to a networking noob?
>
> Sparknotes version:
>  - You went to website https://forums.somewhere.com
>  - The site presented a certificate for https://somewhere-else.com
>  - Your browser properly alerted you to the disparity between "expected"
>    and "provided" certificates.
>
>

Back to comp.os.linux.networking | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

What do do? (forums.mtbr.com uses an invalid security certificate) harry newton <harry@is.invalid> - 2017-06-08 02:29 +0000
  Re: What do do? (forums.mtbr.com uses an invalid security certificate) Dan Purgert <dan@djph.net> - 2017-06-08 10:08 +0000
    Re: What do do? (forums.mtbr.com uses an invalid security certificate) Richard Kettlewell <invalid@invalid.invalid> - 2017-06-08 11:17 +0100
      Re: What do do? (forums.mtbr.com uses an invalid security certificate) Dan Purgert <dan@djph.net> - 2017-06-08 10:34 +0000
    Re: What do do? (forums.mtbr.com uses an invalid security certificate) William Unruh <unruh@invalid.ca> - 2017-06-08 17:20 +0000
      Re: What do do? (forums.mtbr.com uses an invalid security certificate) Jorgen Grahn <grahn+nntp@snipabacken.se> - 2017-06-09 05:51 +0000
        Re: What do do? (forums.mtbr.com uses an invalid security certificate) Richard Kettlewell <invalid@invalid.invalid> - 2017-06-09 10:02 +0100
  Re: What do do? (forums.mtbr.com uses an invalid security certificate) John Doe <always.look@message.header> - 2017-06-08 10:12 +0000
  Re: What do do? (forums.mtbr.com uses an invalid security certificate) Mike Easter <MikeE@ster.invalid> - 2017-06-08 07:41 -0700
  Re: What do do? (forums.mtbr.com uses an invalid security certificate) Mike Easter <MikeE@ster.invalid> - 2017-06-08 09:26 -0700

csiph-web