Rechercher dans l’assistance

Évitez les escroqueries à l’assistance. Nous ne vous demanderons jamais d’appeler ou d’envoyer un SMS à un numéro de téléphone ou de partager des informations personnelles. Veuillez signaler toute activité suspecte en utilisant l’option « Signaler un abus ».

En savoir plus

https doesn't work

  • 2 réponses
  • 2 ont ce problème
  • 10 vues
  • Dernière réponse par Cheng Wang

more options

Firefox 3.6.3. Https is not working (only recently) in a couple of sites including:

https://www.google.com https://www.microsoft.com

All the certificates provided where unable to verify the owner: "This web site does not supply ownership information" "Your connection is partially encrypted"

When i checked the error console, this came up

"www.google.com Potentially vulnerable to CVE-2009-2005" CVE-2009-2005 has something to do with Man-in-the-Middle.

Please help thanks.


URL of affected sites

https://www.google.com, https://www.microsoft.com

Firefox 3.6.3. Https is not working (only recently) in a couple of sites including: https://www.google.com https://www.microsoft.com All the certificates provided where unable to verify the owner: "This web site does not supply ownership information" "Your connection is partially encrypted" When i checked the error console, this came up "www.google.com Potentially vulnerable to CVE-2009-2005" CVE-2009-2005 has something to do with Man-in-the-Middle. Please help thanks. == URL of affected sites == https://www.google.com, https://www.microsoft.com

Toutes les réponses (2)

more options

Those error messages are all different:

On Microsoft sites, they serve some content over HTTP (which is a security no-no) so you get that warning. You should contact their webmasters. Often on large pages, sites will only encrypt the sensitive stuff and not encrypt stuff like images to reduce server load. It's technically a bad security practice.

The google.com message is a issue with the way the server handles SSL renegotiation. It's not a big deal but we provide the warning anyway.

There's nothing actually wrong with either security certificate perse.

more options

The message about CVE-2009-3555 is meant for webmasters to make them aware that they need to fix their servers. Firefox 3.6 versions can detect such a misconfiguration and displays a warning in the "Tools > Error Console". https://wiki.mozilla.org/Security:Renegotiation