Join Early Retirement Today
Reply
 
Thread Tools Search this Thread Display Modes
Chrome Security Certificate Warnings
Old 04-27-2015, 05:07 PM   #1
Full time employment: Posting here.
 
Join Date: Jul 2011
Posts: 571
Chrome Security Certificate Warnings

Hi,

I had a couple of sites WHILE USING CHROME (not on other browsers) where I received a security certificate warning. Yodlee was the most troubling.

For those who do not know, the security certificate indicates if the site is encrypted. On Chrome, you see it as a picture of a green lock (encrypted), lock with a yellow caution sign (you may have protection but not wise to use) and/or a big red X (suggesting the site is not protected at all).

Google has recently issued this warning to sites indicating that Chrome will be upgrading its security certificate. If the site does not accept this or has been slow to change, Chrome will show it as not being safe to enter i.e. not properly encrypted. The yellow caution sign is the first warning. Here is the link from Google indicating the sunsetting of certain certificates. Google Online Security Blog: Gradually sunsetting SHA-1

My question is for those using Google Chrome, have you begun to notice sites that are no longer "safe". I attached a picture of the lock with the yellow caution sign that appears in the address bar so you will know exactly what it looks like. The other indicator is a big red X, with a red line through the letters https also in the address bar .

Are you seeing sites with these warnings in Chrome? Thanks

Thanks
Attached Images
File Type: jpg Yodle certificate.JPG (10.1 KB, 111 views)
__________________

__________________
davef is offline   Reply With Quote
Join the #1 Early Retirement and Financial Independence Forum Today - It's Totally Free!

Are you planning to be financially independent as early as possible so you can live life on your own terms? Discuss successful investing strategies, asset allocation models, tax strategies and other related topics in our online forum community. Our members range from young folks just starting their journey to financial independence, military retirees and even multimillionaires. No matter where you fit in you'll find that Early-Retirement.org is a great community to join. Best of all it's totally FREE!

You are currently viewing our boards as a guest so you have limited access to our community. Please take the time to register and you will gain a lot of great new features including; the ability to participate in discussions, network with our members, see fewer ads, upload photographs, create a retirement blog, send private messages and so much, much more!

Chrome Security Certificate Warnings
Old 04-27-2015, 05:48 PM   #2
Give me a museum and I'll fill it. (Picasso)
Give me a forum ...
Mulligan's Avatar
 
Join Date: May 2009
Posts: 7,376
Chrome Security Certificate Warnings

Yes, I have had them for many months on my Google Chrome machine. I have noticed upon entry into the secure site the padlock rids itself of the yellow changes to the correct security lock though. So I haven't worried about it. But then again, I am no security expert.


Sent from my iPad using Tapatalk
__________________

__________________
Mulligan is offline   Reply With Quote
Old 04-28-2015, 11:05 AM   #3
Full time employment: Posting here.
 
Join Date: Jul 2011
Posts: 571
Quote:
Originally Posted by davef View Post
Hi,

I had a couple of sites WHILE USING CHROME (not on other browsers) where I received a security certificate warning. Yodlee was the most troubling.

For those who do not know, the security certificate indicates if the site is encrypted. On Chrome, you see it as a picture of a green lock (encrypted), lock with a yellow caution sign (you may have protection but not wise to use) and/or a big red X (suggesting the site is not protected at all).

Google has recently issued this warning to sites indicating that Chrome will be upgrading its security certificate. If the site does not accept this or has been slow to change, Chrome will show it as not being safe to enter i.e. not properly encrypted. The yellow caution sign is the first warning. Here is the link from Google indicating the sunsetting of certain certificates. Google Online Security Blog: Gradually sunsetting SHA-1

My question is for those using Google Chrome, have you begun to notice sites that are no longer "safe". I attached a picture of the lock with the yellow caution sign that appears in the address bar so you will know exactly what it looks like. The other indicator is a big red X, with a red line through the letters https also in the address bar .

Are you seeing sites with these warnings in Chrome? Thanks

Thanks
UPDATE: Yodlee Labs is now working properly. While Yodlee simply said they fixed the problem, the security certificate was updated. It took about a week between the time of the first contact (trying to learn whose problem it was) and ultimately Yodlee realizing the problem was on their end (as I analyzed it).

Yodlee is the company providing background support/security to many financial websites, including banks. If Yodlee could miss this change on their website (likely a very small and insignificant part of their effort but....), then anyone of our financial institutions can. Consequently, I am looking at the security certificates and based upon the Google Chrome letter, I am giving my financial institutions a heads-up. I figure at minimum it serves as a good reminder. In the case that generated this note, it actually resulted in a significant change.
__________________
davef is offline   Reply With Quote
Old 06-01-2015, 08:40 AM   #4
Full time employment: Posting here.
 
Join Date: Jul 2011
Posts: 571
I just received this message from Hewitt "As an update, I am told the Deferral Select web certificate was updated over the weekend." I went to the site and it is now up to date.
__________________
davef is offline   Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
The site's security certificate is not trusted! (no, not er.org) kaneohe Other topics 6 12-21-2012 08:05 PM
Investment account for an 8YO -- options, advice, warnings? lhamo Young Dreamers 5 01-03-2010 05:57 AM
Zero-Percent Certificate of Indebtedness ??? Craig FIRE and Money 6 11-21-2005 05:43 PM

 

 
All times are GMT -6. The time now is 03:39 AM.
 
Powered by vBulletin® Version 3.8.8 Beta 1
Copyright ©2000 - 2017, vBulletin Solutions, Inc.