https doesn't work
Firefox 3.6.3. Https is not working (only recently) in a couple of sites including:
https://www.google.com https://www.microsoft.com
All the certificates provided where unable to verify the owner: "This web site does not supply ownership information" "Your connection is partially encrypted"
When i checked the error console, this came up
"www.google.com Potentially vulnerable to CVE-2009-2005" CVE-2009-2005 has something to do with Man-in-the-Middle.
Please help thanks.
URL of affected sites
Alle antwoorden (2)
Those error messages are all different:
On Microsoft sites, they serve some content over HTTP (which is a security no-no) so you get that warning. You should contact their webmasters. Often on large pages, sites will only encrypt the sensitive stuff and not encrypt stuff like images to reduce server load. It's technically a bad security practice.
The google.com message is a issue with the way the server handles SSL renegotiation. It's not a big deal but we provide the warning anyway.
There's nothing actually wrong with either security certificate perse.
The message about CVE-2009-3555 is meant for webmasters to make them aware that they need to fix their servers. Firefox 3.6 versions can detect such a misconfiguration and displays a warning in the "Tools > Error Console". https://wiki.mozilla.org/Security:Renegotiation