Safari 4 complaining about bad SSL certs on some sites

Discussion in 'macOS' started by Schtibbie, Sep 22, 2009.

  1. Schtibbie macrumors 6502

    Jan 13, 2007
    Anyone else see this behavior? Firefox works fine but Safari 4 (on Snow Leopard, FWIW) complains about bad mismatched certificate on and complains about invalid issuer on the cert for bankofamerica on certain parts of their site like the sitekey server and bill pay. But only sometimes for BofA. Always for

    My wife uses Safari so I have a hard time explaining to her that SSL warnings should be heeded (and you should leave the site) when Firefox happily reports these sites as "secure".
  2. Amdahl macrumors 65816

    Jul 28, 2004
    File a bug report with Apple. While it is possible that Firefox is accepting certs that were signed by an expired issuer, more likely is that Apple has an outdated issuer cert in Safari that isn't accepting some newer SSL certs.
  3. PurrBall macrumors 65816


    Oct 25, 2007
  4. Amdahl macrumors 65816

    Jul 28, 2004
    There is also the 'obvious' possibility: The site you are connecting to is not legitimate. This could mean your ISP has poisoned DNS or your computer is infected with something, or someone has hijacked the IP addresses of the website.

    Always something to keep in mind when you are talking about financial sites.

Share This Page