Vodafone cable internet payment site not secure

Forums › One NZ (including Farmside) › Vodafone cable internet payment site not secure - what is the risk?

lchiu7

6521 posts

Uber Geek
+1 received by user: 543

Trusted

#181084 1-Oct-2015 20:48

Was going to pay my cable bill tonight and noticed that the link to the site was marked by Chrome as having security risks.

I decided not to even though I think the risk is not that high. What do others think?

Staying in Wellington. Check out my AirBnB in the Wellington CBD. https://www.airbnb.co.nz/h/wellycbd PM me and mention GZ to get a 15% discount and no AirBnB charges.

jnimmo

1098 posts

Uber Geek
+1 received by user: 255

#1398293 1-Oct-2015 21:04

I would be happy to pay online there for now. Chrome are trying to 'sunset' SHA-1 signed certificates.

The key problem here is that their certificate is valid until June 2017 - Chrome are showing that warning for any SHA-1 signed certificates which expire after 1st January 2017.
http://blog.chromium.org/2014/09/gradually-sunsetting-sha-1.html

There are no real concerns with SHA-1 at the moment, but I guess Google's point is that there could well be issues by 2017.

Maybe I wouldn't trust SHA-1 to protect me under an oppressive regime but would be quite happy doing online payments etc.

lchiu7

6521 posts

Uber Geek
+1 received by user: 543

Trusted

#1398300 1-Oct-2015 21:33

OK I just paid using Edge and there were no complaints from Microsoft! So this time trust Microsoft, not Google :-)

Staying in Wellington. Check out my AirBnB in the Wellington CBD. https://www.airbnb.co.nz/h/wellycbd PM me and mention GZ to get a 15% discount and no AirBnB charges.

r2b2

586 posts

Ultimate Geek
+1 received by user: 109

#1398534 2-Oct-2015 10:39

lchiu7: OK I just paid using Edge and there were no complaints from Microsoft! So this time trust Microsoft, not Google :-)

Well not really - IE & Edge ignore a LOT of SSL warnings and just don't tell you. I'd rather be informed like Firefox & Chrome are starting to do...

lchiu7

6521 posts

Uber Geek
+1 received by user: 543

Trusted

#1398604 2-Oct-2015 11:39

Oh well - my CC number might be out in the wild now :-(

No comment from Vodafone?

Staying in Wellington. Check out my AirBnB in the Wellington CBD. https://www.airbnb.co.nz/h/wellycbd PM me and mention GZ to get a 15% discount and no AirBnB charges.

r2b2

586 posts

Ultimate Geek
+1 received by user: 109

#1398646 2-Oct-2015 11:57

lchiu7: Oh well - my CC number might be out in the wild now :-(

No comment from Vodafone?

Most likely it won't be so I wouldn't overly worry - I think you might find a quite a few e-commerce sites where Chrome is warning about these things as Chrome is taking a very aggressive stance on warning its users.

Plus with Customer Zone I don't believe you would be entering the CC number directly in there and instead you'd be inserting them into DPS' website which I believe has a more modern certificate loaded up. Although I could be wrong as I've only used one flow from it before.