Safari 4 complaining about bad SSL certs on some sites

Discussion in 'macOS' started by Schtibbie, Sep 22, 2009.

  1. Schtibbie macrumors 6502

    Joined:
    Jan 13, 2007
    #1
    Anyone else see this behavior? Firefox works fine but Safari 4 (on Snow Leopard, FWIW) complains about bad mismatched certificate on www.401k.com and complains about invalid issuer on the cert for bankofamerica on certain parts of their site like the sitekey server and bill pay. But only sometimes for BofA. Always for 401k.com.

    My wife uses Safari so I have a hard time explaining to her that SSL warnings should be heeded (and you should leave the site) when Firefox happily reports these sites as "secure".
     
  2. Amdahl macrumors 65816

    Joined:
    Jul 28, 2004
    #2
    File a bug report with Apple. While it is possible that Firefox is accepting certs that were signed by an expired issuer, more likely is that Apple has an outdated issuer cert in Safari that isn't accepting some newer SSL certs.
     
  3. PurrBall macrumors 6502a

    PurrBall

    Joined:
    Oct 25, 2007
    Location:
    Indianapolis
  4. Amdahl macrumors 65816

    Joined:
    Jul 28, 2004
    #4
    There is also the 'obvious' possibility: The site you are connecting to is not legitimate. This could mean your ISP has poisoned DNS or your computer is infected with something, or someone has hijacked the IP addresses of the website.

    Always something to keep in mind when you are talking about financial sites.
     

Share This Page