Gmail and AdSense Using Invalid Security Certificate

Posted in Google, Security | June 22nd, 2008

Firefox 3 shows that Google using invalid security certificates across it’s different services including Gmail and AdSense. Security certificate for it’s Analytics is ok.

15 Responses to “Gmail and AdSense Using Invalid Security Certificate”

Gmail and AdSense Using Invalid Security Certificate on June 22nd, 2008 | 8:14 am

[...] Go to the author’s original blog: Gmail and AdSense Using Invalid Security Certificate [...]
kbhjb on June 22nd, 2008 | 9:40 am

Uhh, you realise how ssl works, right? The certificate has to match the hostname, if multiple hostnames point to the same service, then you have to use the one the certificate is valid for if you want to use ssl.

Obviously in this case google is using mail.google.com and http://www.google.com not the gmail.com or google.com. All sites work like this, check out how microsoft is using invalid certificates here https://wwwtk2test1.microsoft.com/

or check out how verisign are using an invalid certificate here https://www.verisign.net/ or paypal, ebay, etc. This is how the internet works, make sure you understand it before making random uninformed blog posts.
Louise on June 22nd, 2008 | 11:09 am

the page is corrupt when showed in Safari
Keith Dsouza on June 22nd, 2008 | 3:56 pm

This is because the security certificates are bound with www domains and you are trying to access it without it. All browsers will show you invalid certificates if you try to browse without using the http://www.
Rohit on June 22nd, 2008 | 4:11 pm

I receive the same error page on FF-3 accessing adsense via https://google.com/adsense
UrDumb on June 22nd, 2008 | 7:16 pm

https://microsoft.com/ Oh Noes
Ramesh | The Geek Stuff on June 22nd, 2008 | 9:23 pm

kbhjb and Keith have explained it why you are getting that invalid certificate issue.

Ramesh
The Geek Stuff
UrDumb on June 22nd, 2008 | 9:37 pm

https://ebay.com/
https://paypal.com
https://citibank.com/

This is not a security issue, this is how ssl works. OMG GOOGLE HACKED DIGG ME PLZ!!!!!1111
Pavan Kumar on June 23rd, 2008 | 1:27 am

Oops! I too got same thing here….
Nirmal on June 23rd, 2008 | 5:07 am

For me Adsense is showing this error even without https.
Anonymous on June 25th, 2008 | 4:13 pm

…

Want to find out how I make $40,000 per month every month from my Website?…
Siddharth on June 27th, 2008 | 1:18 am

I am getting this from a long time
on nearly all google services in IE 7
moutosh on August 12th, 2008 | 9:05 am

If you find the error message enoying when logging on to gmail through https, just use instead of https://gmail.com
moutosh on August 12th, 2008 | 9:08 am

correction:

If you find the error message enoying when logging on to gmail through https, just use https://mail.google.com instead of https://gmail.com
Chris on August 14th, 2008 | 4:37 am

Sry moutosh that doesn’t work:
https://mail.google.com redirects to
https://www.google.com/accounts/ServiceLogin?
So the certificate continutes not to match during the vital login phase.