Security on browsers

3 posts / 0 new
Last post
#1 Wed, 08/27/2014 - 09:25
drguild

Security on browsers

I upgraded to Chrome 64bit which has just been released in and when going to my server setup port 10000 I get this as google has changed the certificate warning for the new 64 bit version to this.

Your connection is not private
 
Attackers might be trying to steal your information from server.revnet (for example, passwords, messages, or credit cards).
 
Back to safetyHide advanced
You attempted to reach server.revnet, but the server presented a certificate issued by an entity that is not trusted by your computer's operating system. This may mean that the server has generated its own security credentials, which Chrome cannot rely on for identity information, or an attacker may be trying to intercept your communications.
 
Proceed to server.revnet (unsafe)

My site is internal only as you can see by the url.

This is something you guys should look if we can sign the certificate etc to show the site as trusted, as its going to freak many people out and nearly caught me out just now.

This warning will continue from now on in Google Chrome and the 64bit will become the default soon for everyone in the world once Google has sorted a couple minor things out.

Wed, 08/27/2014 - 09:31
andreychek

Howdy,

That appears to be what Chrome shows when connecting to a self-signed SSL certificate. It looks like they've changed that message recently, I'm seeing the same thing.

I'm not sure if Chrome offers any methods of making that message less intimidating... though the only way I know of to prevent it would be to install a commercial SSL certificate in place of a self-signed one.

-Eric

Wed, 08/27/2014 - 09:42 (Reply to #2)
drguild

Good to see you are on top of things and using the new Chrome 64bit also. A good sign of a good admin when their up to date with things.

Was mainly posting to let you guys know before everyone else jumps on the forum like WHAT THE @#$% WITH THIS WARNING.

I know ssl self signed has issues I know that from HP remote access, Java etc and other things there is a signing thing somewhere for trusted self signed but I believe that uses local signing server software one installs to generate the certificates etc and I felt it a bit much work at the time for a few certificates.

Topic locked