Firefox 3 shows that Google using invalid security certificates across it’s different services including Gmail and AdSense. Security certificate for it’s Analytics is ok.
Technology,Security,Software Review
Firefox 3 shows that Google using invalid security certificates across it’s different services including Gmail and AdSense. Security certificate for it’s Analytics is ok.
Uhh, you realise how ssl works, right? The certificate has to match the hostname, if multiple hostnames point to the same service, then you have to use the one the certificate is valid for if you want to use ssl.
Obviously in this case google is using mail.google.com and http://www.google.com not the gmail.com or google.com. All sites work like this, check out how microsoft is using invalid certificates here https://wwwtk2test1.microsoft.com/
or check out how verisign are using an invalid certificate here https://www.verisign.net/ or paypal, ebay, etc. This is how the internet works, make sure you understand it before making random uninformed blog posts.
the page is corrupt when showed in Safari
This is because the security certificates are bound with www domains and you are trying to access it without it. All browsers will show you invalid certificates if you try to browse without using the www.
I receive the same error page on FF-3 accessing adsense via https://google.com/adsense
https://microsoft.com/ Oh Noes
kbhjb and Keith have explained it why you are getting that invalid certificate issue.
Ramesh
The Geek Stuff
https://ebay.com/
https://paypal.com
https://citibank.com/
This is not a security issue, this is how ssl works. OMG GOOGLE HACKED DIGG ME PLZ!!!!!1111
Oops! I too got same thing here….
For me Adsense is showing this error even without https.
I am getting this from a long time
in IE 7
on nearly all google services
If you find the error message enoying when logging on to gmail through https, just use instead of https://gmail.com
correction:
If you find the error message enoying when logging on to gmail through https, just use https://mail.google.com instead of https://gmail.com
Sry moutosh that doesn’t work:
https://mail.google.com redirects to
https://www.google.com/accounts/ServiceLogin?
So the certificate continutes not to match during the vital login phase.
same thing happening to me too, all alternate inputs (http, https) for gmail, igoogle, etc. bring up the warning screen on mac for safari and firefox 3. this is not normal. nothing works. it did two days ago, however.
This is rather annoying, i cant visit my sites i usually visit, i’ve never had this issue until 3 days ago.
im NOT going to be “tarded” and type in gmails full address when i know by typing gmail.com will take me to googles mail server is there any reason im NOW seeing this do i need to clear a cache or change some settings
ADD;
I forgot to mention, im using Fire Fox 3.01 and have some addons installed
Download em all
and
Fire guestures
So… what can we do about this besides tell Google to make their certificates match?
@ Ale
you can simple add the exception when this error will come
Thanks.
I simply went to the ORIGINAL Firefox site…REdownloaded Firefox…and it worked fine for me………NO error messages….
it’s a malware that’s been doing this, not firefox
http://forums.techguy.org/malware-removal-hijackthis-logs/541483-solved-invalid-security-certificate-when.html
Oh Man! Just check the date and time of your PC. If you set it on current date/time, this problem will disappear.
Thanks JSA your the only one that has it sorted: fixed my lap top instantly, date got mucked up by no.1 son fiddling around with things beyound me.
its not malware.
owh my…
tq JSA..i owe u buger..haha..
Thanks JSA… You the man… Forget all these other technology gurus that can tell you what is wrong but not able to fix it. I’m an engineer myself and I hate dealing with these techno know it all geeks that talk down at you for not knowing what the problem is but they don’t really know how to fix the problem. There is hope with people like you out there…!!!!
awesome man(JSA)…thanx a lot..
JSA you the man…
you the man JSA
Thank you
This is a big security issue!!! I performed few penetration testing, and when i do man in the middle attack to sniff the passwords of the ssl connection, i prompt fake cert and the user would get this error (before this i do arp poisoning on gateway). If user add an exception and continue with logging in i can get all usernames and passwords. So it is big issue!!! When i go to log in on to my gmail account i am never sure if i am being attacked or it is real problem with their cert. I heard some funny explanations here (like use www etc…)
Check your Date and Year setting in PC
THAT’S IT!!!! The date was incorrectly set by mistake! Thanks so much JSA and xenon. So glad I found your solution rather than having to delete and re-download.
re: across it’s different services
that should be:
its different services
thanks,
–a
Solution:
Just Check date of your pc.
Correct it and it will be ok.
All the best.
Ravindra
http://suvidhashopping.info
Yes, you just only check date of your pc like Ravindra said.
Nice to meet you
What if the Date and Time were already correct? I’m still getting the message regardless (using Google Chrome)
There are many ways to use AdSense to achieve your goals.Some people are using AdSense to earn a great deal of money in amounts that you would not have thought was possible unless you robbed a bank.
After study just a few of the blog posts in your website now, and I truly like your method of blogging. I bookmarked it to my bookmark web site checklist and will probably be checking back soon. Pls check out my site as properly and let me know what you think.