Avatar for Username

Caută ajutor

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Află mai multe

Acest fir de discuție a fost arhivat. Adresează o întrebare nouă dacă ai nevoie de ajutor.

https doesn't work

  • 2 răspunsuri
  • 2 au această problemă
  • 3 vizualizări
  • Ultimul răspuns de Cheng Wang

AnonymousUser
AnonymousUser
more options

Firefox 3.6.3. Https is not working (only recently) in a couple of sites including:

https://www.google.com https://www.microsoft.com

All the certificates provided where unable to verify the owner: "This web site does not supply ownership information" "Your connection is partially encrypted"

When i checked the error console, this came up

"www.google.com Potentially vulnerable to CVE-2009-2005" CVE-2009-2005 has something to do with Man-in-the-Middle.

Please help thanks.


URL of affected sites

https://www.google.com, https://www.microsoft.com

Firefox 3.6.3. Https is not working (only recently) in a couple of sites including: https://www.google.com https://www.microsoft.com All the certificates provided where unable to verify the owner: "This web site does not supply ownership information" "Your connection is partially encrypted" When i checked the error console, this came up "www.google.com Potentially vulnerable to CVE-2009-2005" CVE-2009-2005 has something to do with Man-in-the-Middle. Please help thanks. == URL of affected sites == https://www.google.com, https://www.microsoft.com

Toate răspunsurile (2)

Cheng Wang
Cheng Wang
more options

Those error messages are all different:

On Microsoft sites, they serve some content over HTTP (which is a security no-no) so you get that warning. You should contact their webmasters. Often on large pages, sites will only encrypt the sensitive stuff and not encrypt stuff like images to reduce server load. It's technically a bad security practice.

The google.com message is a issue with the way the server handles SSL renegotiation. It's not a big deal but we provide the warning anyway.

There's nothing actually wrong with either security certificate perse.

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

The message about CVE-2009-3555 is meant for webmasters to make them aware that they need to fix their servers. Firefox 3.6 versions can detect such a misconfiguration and displays a warning in the "Tools > Error Console". https://wiki.mozilla.org/Security:Renegotiation