topic Expired TLS Certificate on booklet.plus.net in Everything else

Expired TLS Certificate on booklet.plus.net

mcintoshuk — Sun, 27 Oct 2024 19:58:13 GMT

I've just ordered an upgrade to Full Filbre and one of the PN emails points to a "Welcome to Full Fibre Guide", but following the link shows that the TLS Certificate expired 177 days ago gives the usual dire warnings in my browser...booklet.plus.net.JPG

Re: Expired TLS Certificate on booklet.plus.net

Townman — Sun, 27 Oct 2024 20:53:00 GMT

Try this - https://booklet.plus.net/welcome-to-full_fibre

Re: Expired TLS Certificate on booklet.plus.net

mcintoshuk — Sun, 27 Oct 2024 21:04:16 GMT

Sorry, but that's the link I'm using and I still get a "Not secure" warning. Don't get me wrong, I found the "booklet" OK, I'm just pointing out that site security certificate is out of date by some months, which seems pretty poor for an ISP. Many people will, quite correctly, simply refuse to go past the warning.

Re: Expired TLS Certificate on booklet.plus.net

Penny — Sun, 27 Oct 2024 21:05:16 GMT

@mcintoshuk wrote:

I've just ordered an upgrade to Full Filbre and one of the PN emails points to a "Welcome to Full Fibre Guide", but following the link shows that the TLS Certificate expired 177 days ago

@mcintoshuk Thanks for highlighting this, has now been flagged up in an area where any similar items are collated for staff attention.

Relevant details noted and flagged up for PN Management, by one of the Superusers.

Re: Expired TLS Certificate on booklet.plus.net

Townman — Sun, 27 Oct 2024 21:11:09 GMT

Odd I can navigate to that link with no error reported. I am however on a static IP. Wonder if that’s relevant?

Re: Expired TLS Certificate on booklet.plus.net

jab1 — Sun, 27 Oct 2024 21:13:52 GMT

@Townman , @Penny I think this has been highlighted before.

As a point of interest, my Firefox browser displays the same warning.

Re: Expired TLS Certificate on booklet.plus.net

mcintoshuk — Sun, 27 Oct 2024 21:25:35 GMT

@Townman No, I'm on a static IP too. It's the browser that throws the warning: Chrome, Edge and Firefox (at least) are now all coded to "require" an HTTPS connection to a site (and for the certificate to be valid), else they'll give warnings like that. You can sometimes disable the HTTPS check, but it isn't advisable.

Re: Expired TLS Certificate on booklet.plus.net

paul_blitz — Thu, 31 Oct 2024 00:22:53 GMT

The certificate expired at the end of July 2024.

As a consultant, I always recommend that 2 staff members in an organisation are tasked with managing an organisation's certificates. They do not necessarily have to be the ones ordering the certs, but they need to be aware of ALL certs used by the organisation, where they are used, and who is responsible for each of them. Then, in the month before certificate expiry, they need to manage the certificate's update (ie tell the relevant person, and get a confirmation that it has actually been updated). Two people for resilience: people get ill, go on holiday.

Re: Expired TLS Certificate on booklet.plus.net

corringham — Thu, 31 Oct 2024 10:28:53 GMT

@paul_blitz wrote:

As a consultant, I always recommend that 2 staff members in an organisation are tasked with managing an organisation's certificates.

That seems a bit excessive - why not just leave it to customers to notice? After all (ex-)customers are already running most of the customer support functions anyway...

Re: Expired TLS Certificate on booklet.plus.net

paul_blitz — Thu, 31 Oct 2024 11:33:05 GMT

Whilst we can jest about Plusnet, many customers run money-earning sites, and THEY really do want to keep their customers happy!