2talk website certificate?

Forums › New Zealand Broadband › 2talk website certificate?

1eStar

1495 posts

Uber Geek
+1 received by user: 344

Topic # 114418 19-Feb-2013 14:24

When I try to log into the secure part of the 2talk site I get the following:
The site's security certificate is not trusted!
You attempted to reach live.2talk.co.nz, but the server presented a certificate issued by an entity that is not trusted by your computer's operating system. This may mean that the server has generated its own security credentials, which Google Chrome cannot rely on for identity information, or an attacker may be trying to intercept your communications.
You should not proceed, especially if you have never seen this warning before for this site.
Im logging in from my Android phone. Should I be worried?

ajobbins

Awesome
4813 posts

Uber Geek
+1 received by user: 1062

Trusted

Subscriber

Reply # 765795 19-Feb-2013 14:32

All good from Firefox on my PC, but I get a warning in Chrome on my Android too (Galaxy S3, latest firmware, Chrome up to date).

A bit strange. Viewing the cert details in Firefox everything looks OK. Cert is valid until 2017, was issued nearly a year ago by GeoTrust who are pretty common.

I wonder what it is that the phone is getting upset about

Twitter: ajobbins

ajobbins

Awesome
4813 posts

Uber Geek
+1 received by user: 1062

Trusted

Subscriber

Reply # 765798 19-Feb-2013 14:32

Also, I logged onto live.2talk.co.nz from my phone a couple of days ago and didn't get this error

Twitter: ajobbins

mattwnz

14421 posts

Uber Geek
+1 received by user: 1888

Reply # 765826 19-Feb-2013 15:14

Maybe it is an obscure certificate?

spearsniper

130 posts

Master Geek
+1 received by user: 59

Reply # 765847 19-Feb-2013 15:36

Someone forgot to install the chain certificate when they did the SSL cert.

Easy to check from here: https://ssl-tools.verisign.com/#certChecker

1eStar

1495 posts

Uber Geek
+1 received by user: 344

Reply # 765871 19-Feb-2013 16:57

Ok. Without being a security specialist I assume I can check my 2talk balance without malicious, nefarious and obfuscated threat.

spearsniper

130 posts

Master Geek
+1 received by user: 59

Reply # 765917 19-Feb-2013 19:26

My personal opinion would be that you are safe to use the site from your PC. But I would not use the mobile version until they have updated the SSL cert

1eStar

1495 posts

Uber Geek
+1 received by user: 344

Reply # 766023 19-Feb-2013 22:03

What is likely to happen if I use my mobile browser? I don't own a pc. Could my account be compromised?

spearsniper

130 posts

Master Geek
+1 received by user: 59

Reply # 766136 20-Feb-2013 07:20

Probably nothing would happen if you used the mobile version. Your risk of having your data intercepted and viewed is increased without having the secured connection.

I liken it to passing a note around the class.... Without a SSL connection, everyone between the sender and the receiver can read the note as it is in plain text and is easy to read.

With a SSL connection, the note is still passed to numerous people, but the text is so garbled it is unreadable by anyone other than the receiver (as they have the correct key to decrypt it).

gurumeditation

23 posts

Geek
+1 received by user: 1

Trusted

Reply # 767213 21-Feb-2013 17:28

Can you please report back if you are still having any certificate issues with the 2talk Live web site. We have tested on Chrome on multiple platforms including mobiles and can no longer see an issue here.

Thanks,
Ray

1eStar

1495 posts

Uber Geek
+1 received by user: 344

Reply # 767234 21-Feb-2013 18:21

Fixed. Log in successful with no errors. My device should be up to date now too. Moved from 4.1.1 to 4.1.2 on my note 2 since problems first appeared.