Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > alt.comp.os.windows-10 > #44581

Re: What do do? (forums.mtbr.com uses an invalid security certificate)

From Dan Purgert <dan@djph.net>
Newsgroups alt.comp.os.windows-10, alt.os.linux, comp.os.linux.networking
Subject Re: What do do? (forums.mtbr.com uses an invalid security certificate)
Followup-To comp.os.linux.networking
Date 2017-06-08 10:08 +0000
Organization A noiseless patient Spider
Message-ID <slrnoji8n1.1b6.dan@xps-linux.djph.net> (permalink)
References <ohacq6$167$1@gioia.aioe.org>

Cross-posted to 3 groups.

Followups directed to: comp.os.linux.networking

Show all headers | View raw


harry newton wrote:
> I just want to have a normal safe encrypted connection to this web site:
>  https://forums.mtbr.com/
>
> But I get this error which is what I'm asking you about:
> http://i.cubeupload.com/pNM36t.gif
>
> The error in words is:
>  Your connection is not secure.
>  The owner of forums.mtbr.com has configured their website improperly.
>  To protect your information from being stolen, Tor Browser has
>  not connected to this website.
>  [Advanced]
>  forums.mtbr.com uses an invalid security certificate.
>  The certificate is only valid for the following names:
>  cloudfront.net,*.cloudfront.net
>  Error code: SSL_ERROR_BAD_CERT_DOMAIN
>  [Add Exception...]
>
> Should I press "Add Exception"?
> All I want is to log into the site in a secure encrypted way.

Contact the forum admin -- seems they're using cloudfront as a CDN /
loadbalancer, but the certs are misconfigured.

>
> I'm not sure what is the RIGHT thing to do.

It's a bit of a grey area, honestly.

>
> What I did was press the button to download the certificate.
> Did I need to do that?

Probably - depends on the actual browser (most just allow you to add an
exception on a temporary or permanent basis).

>
> Did I do the right steps?
> How do I undo what I did if not?

For some value of "right".  Revoking the exception depends on the what
the "base" browser is (i.e. Firefox or Chrome), as they each have
slightly different methods for revoking the exception.

>
> Can someone just explain what is going on to a networking noob?

Sparknotes version:
 - You went to website https://forums.somewhere.com
 - The site presented a certificate for https://somewhere-else.com
 - Your browser properly alerted you to the disparity between "expected"
   and "provided" certificates.


-- 
|_|O|_| Registered Linux user #585947
|_|_|O| Github: https://github.com/dpurgert
|O|O|O| PGP: 05CA 9A50 3F2E 1335 4DC5  4AEE 8E11 DDF3 1279 A281

Back to alt.comp.os.windows-10 | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

What do do? (forums.mtbr.com uses an invalid security certificate) harry newton <harry@is.invalid> - 2017-06-08 02:29 +0000
  Re: What do do? (forums.mtbr.com uses an invalid security certificate) "J.O. Aho" <user@example.net> - 2017-06-08 07:04 +0200
  Re: What do do? (forums.mtbr.com uses an invalid security certificate) Dan Purgert <dan@djph.net> - 2017-06-08 10:08 +0000
  Re: What do do? (forums.mtbr.com uses an invalid security certificate) Mike Easter <MikeE@ster.invalid> - 2017-06-08 07:41 -0700
  Re: What do do? (forums.mtbr.com uses an invalid security certificate) Mike Easter <MikeE@ster.invalid> - 2017-06-08 09:26 -0700

csiph-web