Welcome to DU! The truly grassroots left-of-center political community where regular people, not algorithms, drive the discussions and set the standards. Join the community: Create a free account Support DU (and get rid of ads!): Become a Star Member Latest Breaking News General Discussion The DU Lounge All Forums Issue Forums Culture Forums Alliance Forums Region Forums Support Forums Help & Search

TheBlackAdder

(28,169 posts)
Mon May 29, 2017, 11:37 AM May 2017

Did Hotmail's SSL Certificate just expire?

.

This is odd, having worked with SSL many times in the past.
Perhaps they need to add a new signer in their keystore, and hopefully it doesn't change too much.

I get to the initial signon screen, and when being redirected to their https session, the following occurs:


Secure Connection Failed

An error occurred during a connection to www.hotmail.com. Invalid OCSP signing certificate in OCSP response. Error code: SEC_ERROR_OCSP_INVALID_SIGNING_CERT

The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
Please contact the website owners to inform them of this problem.


===

Quite frankly, when going to hotmail's logon screen, the https session should be already established, but that's just me.

.

4 replies = new reply since forum marked as read
Highlight: NoneDon't highlight anything 5 newestHighlight 5 most recent replies

TheBlackAdder

(28,169 posts)
2. Awesome, thanks! I tried it, and it got closer, opening the account, and failed right before handoff
Mon May 29, 2017, 11:59 AM
May 2017

.

Same error.

It just got further along for me. I'll try another browser, on a different PC a little bit layer.


At least I know it seems to be Firefox related.


.

TheBlackAdder

(28,169 posts)
4. It's an MS issue. Firefox has tighter security that IE and Chrome. MS suggests dumbing down settings
Tue May 30, 2017, 10:49 AM
May 2017

.


Many MS sites are affected by this security lapse.


There are suggestions to dumb down Firefox, which might affect your other websites used.

That's great. A firm telling folks to disable some security settings that will probably be forgottenby them in a week or two. Then, the folks who do this will be running less secure than they should be.

.

Latest Discussions»General Discussion»Did Hotmail's SSL Certifi...