Safari 4 complaining about bad SSL certs on some sites

[Schtibbie]

Anyone else see this behavior? Firefox works fine but Safari 4 (on Snow Leopard, FWIW) complains about bad mismatched certificate on www.401k.com and complains about invalid issuer on the cert for bankofamerica on certain parts of their site like the sitekey server and bill pay. But only sometimes for BofA. Always for 401k.com.

My wife uses Safari so I have a hard time explaining to her that SSL warnings should be heeded (and you should leave the site) when Firefox happily reports these sites as "secure".

 

[Amdahl]

File a bug report with Apple. While it is possible that Firefox is accepting certs that were signed by an expired issuer, more likely is that Apple has an outdated issuer cert in Safari that isn't accepting some newer SSL certs.

 

[PurrBall]

No errors on 401k.com in Safari here.

 

[Amdahl]

There is also the 'obvious' possibility: The site you are connecting to is not legitimate. This could mean your ISP has poisoned DNS or your computer is infected with something, or someone has hijacked the IP addresses of the website.

Always something to keep in mind when you are talking about financial sites.