topic Re: Non- Secure connection warning message in Tech Help - Software/Hardware etc

Non- Secure connection warning message

shutter — Thu, 04 Jan 2018 14:23:05 GMT

Around Christmas day, I wanted to access my on line bank, to check my balance !... so, as usual, I went to the Google search page, and typed in Nationwide.... then clicked on the first listing, ( as usual )... and got a message saying my connection was not secure.

( was using my normal browser.... CYBERFOX latest edition )... so I thought I would try FIREFOX... downloaded and installed it,.... and did the same again.... got the same message , saying my connection was not secure

NOTE the https address in the address bar....

Google shows an https address in the address bar, on both.... ( implying that I am on a secure connection)

the page address I clicked on for Nationwide shows an https address... but gives the not secure message ? ? ?

SO ...I found Internet Explorer, lurking away somewhere on my computer... and brought that into the action.... same routine.... clicked for Google... put in Nationwide, and up comes the banking page, ready to log in... with a yellow padlock and a gree arrow from Trusteer Rapport

which, gives the following page.... notice the https address.... the green square from Trusteer Rapport, and the padlock denoting a secure site...

and hovering over the address and padlock, it says it is verified by Verisign.. SO... is that secure ? or not ?

I have been in contact with @Anonymous on PM. and also in contact with the bank showing them screenshots of what I had received, .... the bank suggested I type in www.nationwide.co.uk instead of using a bookmark or favourite which when done, gives the https address in the I.E. 11.0.4 and brings up the bank page... BUT do the same on FF and Cyberfox...gives the warning.

On another thread I asked the question….

@Baldrick1 @Anonymous So... why does Internet explorer allow the connection as safe... and not Firefox or Cyberfox on latest up to datests versions...

when prior to these latest versions, no such warning messages appeared either on the router or on the banking site..?

Because I am confused about it…

@Anonymous gave a linky, which I read… and “kinda” understand, about the difference between http and https urls.

The bank reply when I queried this suggested I type into the address bar www.nationwide.co.uk and not use a bookmark or favourite linky, which is an http address !… and I would expect that to throw up the warning…

However… I normally go to a google search page (which shows an https address in the address bar… suggesting that my connection to Google is secure…..) and type in Nationwide and then click on the listing….

Which gives a https address… yet this still chucks up the security warning on Cyberfox and Firefox..

.but I.E 11.0.4 ( latest version ) allows and shows it as a secure connection ( yellow padlock ) (verified by verisign ).. it also changes the www.nationwide address to an https version… when typed by hand and not clicked by linky…

@baldrick said…..

My guess would be that IE is long in the tooth and never gave any warnings. The later browsers probably do it in an attempt to improve warnings to people logging into unsecured sites such as clones to banking sites. I assume that these browsers don't discriminate between sites inside or outside of your firewall.

@Baldrick… ok… so I.E. 11.0.4 may not have the facility to chuck up the warning… BUT it does have the secure green padlock, showing…and also the green arrow of Trusteer Rapport, so there are some security checks going on with I.E.. And as far as I know Nationwide is a secure banking site….

IF… as you both say… that the Nationwide site is “safe” because it has https in the url, then why do the Firefox and Cyberfox browser say it is unsafe ? When prior there was no warning and connections have been secure…?

Either a site is secure, on a browser, or it isn`t….

@Anonymous says FF and Cyberfox are “trying to be helpful, and why not”… but in actual fact, it is not helpful, but very confusing, and makes me wonder whether my router has been hacked, or I am using some wrong connection DNS ? ? ? Or whatever… so it is very worrying to see this warning, that is being “helpful"

Re: Non- Secure connection warning message

rongtw — Thu, 04 Jan 2018 14:27:06 GMT

@shutter i am with nationwide too , from my saved favorite link i get this with FF 57.03

Re: Non- Secure connection warning message

Oldjim — Thu, 04 Jan 2018 14:30:57 GMT

I don't se that problem with Firefox

Re: Non- Secure connection warning message

shutter — Thu, 04 Jan 2018 14:31:08 GMT

Yup 57.03 here too ! ..

Re: Non- Secure connection warning message

Anonymous — Thu, 04 Jan 2018 14:34:38 GMT

First off @shutter these two issues are NOT related. The warning given by Firefox and others in relation to the OP is to warn you that you are logging in to a non secure site and as a consequence your details may be exposed.

What you are seeing it related to the handling of the digital certificate from the nationwide site, as I have already said there is nothing wrong with this site or certificate and when using a http url to get to the nationwide site I am automatically redirected to the https one as I showed you in my previous screen shots.

Re: Non- Secure connection warning message

VileReynard — Thu, 04 Jan 2018 14:37:57 GMT

Try again using the original browser - maybe a certificate had expired & has since been fixed.

Re: Non- Secure connection warning message

shutter — Thu, 04 Jan 2018 14:43:40 GMT

@Anonymous

@Anonymous wrote:

First off @shutter these two issues are NOT related. The warning given by Firefox and others in relation to the OP is to warn you that you are logging in to a non secure site and as a consequence your details may be exposed.

What you are seeing it related to the handling of the digital certificate from the nationwide site, as I have already said there is nothing wrong with this site or certificate and when using a http url to get to the nationwide site I am automatically redirected to the https one as I showed you in my previous screen shots.

I don`t understand....

You are saying I am trying to log in to a non secure site.... no... I am trying to access a secure site... on which I will be able to "log in" to my account. as you say, there is nothing wrong with the security certificate, as proved by the internet explorer pics previously shown in the o.p.

Like you when I put in the www.nationwide.co.uk manually, it changes to https ... ( secure site )..

Am I being "thick" or just stupid.... I understand that others are not having this problem... hence my post, because, like them,... i would like not to have the problem...

Re: Non- Secure connection warning message

Anonymous — Thu, 04 Jan 2018 14:43:44 GMT

@VileReynard - The certificate was issued on the 19 Oct 2017 so it should have been the latest one when visited on the 25th of Dec.

Re: Non- Secure connection warning message

shutter — Thu, 04 Jan 2018 14:46:46 GMT

@VileReynard obviously not reading all of my post....

I have tried it with typing in to the address bar,... and also using the google search link... no bookmark or prior history is involved.

I have also tried via wired connection to the router and via wireless connection to the router... all are same result.. only Internet Explorer will give me access to my bank site.

Re: Non- Secure connection warning message

Anonymous — Thu, 04 Jan 2018 14:48:11 GMT

@shutter - This problem appears to be yours and so far only yours. I am not saying you're trying to log in to a non secure site, please read the post again.

You're not being thick I can understand why it's confusing when you're seeing what you're seeing. It may be an idea to move this to a thread of it's own as it is unrelated to the OP.

Re: Non- Secure connection warning message

shutter — Thu, 04 Jan 2018 14:59:00 GMT

@Anonymous Quite probably, it is my own fault, and my problem... but... I am a drowning man here, and I am asking for help and advice on how to fix it.. ( chuck me a lifebelt, or send the RNLI out to me )

In other words.... how do I make my connection secure ? so that I don `t get this message when trying to access the bank site from Cyberfox or Firefox.....

Simple step by step instructions please....

p.s. This is a NEW thread... !

Re: Non- Secure connection warning message

Anonymous — Thu, 04 Jan 2018 15:11:23 GMT

shutter wrote:

p.s. This is a NEW thread... !

I honestly don’t know what to say @shutter, the others that have tested it get the same result as I do and indeed what you should be getting. But how to fix what you are seeing is another matter as I do not know what is causing it.

With that said you might want to read your email, it may or may not be of use in this instance.

Re: Non- Secure connection warning message

Baldrick1 — Thu, 04 Jan 2018 16:06:27 GMT

@shutter

I'm sorry but I have nothing to add except to suggest that you re-install Firefox. I use Firefox Quantum 57.03 with the HTTPS Everywhere extension. I also bank with Nationwide and get no warning messages.

Re: Non- Secure connection warning message

rongtw — Thu, 04 Jan 2018 16:25:27 GMT

or try it with No addons

Re: Non- Secure connection warning message

Anonymous — Thu, 04 Jan 2018 16:28:36 GMT

@shutter - What @Baldrick1 says may well be worth trying, after all you've nothing to lose by doing it. But as it's Windows after you've removed the browser, and any associated data restart Windows before you reinstall a newly downloaded version. I know you know but you'll get it here.

Re: Non- Secure connection warning message

shutter — Thu, 04 Jan 2018 17:47:48 GMT

@Baldrick1 @Anonymous @rongtw

OK.. well I kinda guessed it would be a waste of time and effort,.... but thought I better give it a go, seeing as you are all trying to help.... here is what I did..

Uninstalled Firefox

Ran CCleaner in cleaner mode

Searched for Firefox in the "start" menu window, found Mozilla Maintenance Service folder still left over

Tried to "Erase" it using a 3 pass overwriter, but it "FAILED"..

so.. used the "Delete" option... which cleared it from the list, and put it in the recycle bin.

Erased the Recycle bin no problem.

Ran CCleaner in REG CLEANER mode..... twice...

shut down...( windows updates taking place on shut down ).

Re-started.

Downloaded new copy of Firefox via I.E.11.0.4 and ran the installation.

On completion, it showed a folder on the desktop "Old FIrefox Data".... which surprised me, because I thought I had erased it from the Recycle bin.. ( this folder contained all the stuff from the Moz Maint Service folder.)

Opened up Firefox.... and typed into FF search bar... ( no addons, or extras installed at this time ). Nationwide

showed me the linky.... so I clicked on it... and Hey Presto ! ! !

insecure connection message

Just the same as before.

Went to the Tools , Options, and did all my favourite settings.. like no history, and no tabs etc... set google as the home page... and tried again...... once more... Hey Presto...

insecure connection message....

Re: Non- Secure connection warning message

rongtw — Thu, 04 Jan 2018 17:55:09 GMT

Odd

What security do you get here @shutter i get 2 different warnings , on home page it warns insecure connection due to some Images , but when posting a reply it says secure connection ? see below

Re: Non- Secure connection warning message

shutter — Thu, 04 Jan 2018 18:40:02 GMT

@rongtw Yeah... I have that too.... !...

Re: Non- Secure connection warning message

rongtw — Thu, 04 Jan 2018 19:47:14 GMT

do you get a Non secure website warning here http://virtualglobetrotting.com/countries/GB or is it just Nationwide ?

Moderator's note by Mike (Mav): Link fixed.

Re: Non- Secure connection warning message

shutter — Thu, 04 Jan 2018 18:58:10 GMT

I get this....