Non- Secure connection warning message

[#1]

Around Christmas day, I wanted to access my on line bank, to check my balance !... so, as usual, I went to the Google search page, and typed in Nationwide.... then clicked on the first listing, ( as usual )... and got a message saying my connection was not secure.

( was using my normal browser.... CYBERFOX  latest edition )... so I thought I would try FIREFOX... downloaded and installed  it,.... and did the same again.... got the same message , saying my connection was not secure

NOTE the https address in the address bar.... 

Google shows an https address in the address bar, on both.... ( implying that I am on a secure connection)

the page address I clicked on for Nationwide shows an https address... but gives the not secure message  ? ? ?

SO ...I found Internet Explorer, lurking away somewhere on my computer... and brought that into the action....  same routine.... clicked for Google... put in Nationwide, and up comes the banking page, ready to log  in... with a yellow padlock and a gree arrow from Trusteer Rapport

which, gives the following page.... notice the https address.... the green square from Trusteer Rapport, and the padlock denoting a secure site...

 and hovering over the address and padlock,  it says it is verified by Verisign.. SO... is that secure  ?   or  not  ?

I have been in contact with @Anonymous on PM.  and also in contact with the bank showing them screenshots of what I had received, .... the bank suggested I type in www.nationwide.co.uk instead of using a bookmark or favourite   which when done, gives the https address in the I.E. 11.0.4  and brings up the bank page... BUT do the same on FF and Cyberfox...gives the warning.

On another thread  I asked the question….

@Baldrick1 @Anonymous So... why does Internet explorer allow the connection as safe... and not Firefox or Cyberfox on latest up to datests versions...

when prior to these latest versions, no such warning messages appeared either on the router or on the banking site..?

Because I am confused about it…

@Anonymous gave a linky, which I read… and “kinda” understand, about the difference between http and https urls.

The bank reply when I queried this suggested I type into the address bar www.nationwide.co.uk and not use a bookmark or favourite linky,    which is an http address !… and I would expect that to throw up the warning…

However… I normally go to a google search page (which shows an https address in the address bar… suggesting that my connection to Google is secure…..) and type in Nationwide and then click on the listing….

Which gives a https address… yet this still chucks up the security warning on Cyberfox and Firefox..

.but I.E 11.0.4 ( latest version ) allows and shows it as a secure connection ( yellow padlock ) (verified by verisign ).. it also changes the www.nationwide address to an https version… when typed by hand and not clicked by linky…

@baldrick said…..

My guess would be that IE is long in the tooth and never gave any warnings. The later browsers probably do it in an attempt to improve warnings to people logging into unsecured sites such as clones to banking sites. I assume that these browsers don't discriminate between sites inside or outside of your firewall.

@Baldrick… ok… so I.E. 11.0.4 may not have the facility to chuck up the warning… BUT it does have the secure green padlock, showing…and also the green arrow of Trusteer Rapport,  so there are some security checks going on with I.E.. And as far as I know Nationwide is a secure banking site….

IF… as you both say… that the Nationwide site is “safe” because it has https in the url, then why do the Firefox and Cyberfox browser say it is unsafe ? When prior there was no warning and connections have been secure…?

Either a site is secure, on a browser, or it isn`t….

@Anonymous says FF and Cyberfox are “trying to be helpful, and why not”… but in actual fact, it is not helpful, but very confusing, and makes me wonder whether my router has been hacked, or I am using some wrong connection DNS ? ? ? Or whatever… so it is very worrying to see this warning, that is being “helpful"

[#2]

@shutter i am with nationwide too , from my saved favorite link i get this with FF 57.03

[#3]

I don't se that problem with Firefox

[#4]

Yup 57.03 here too ! ..

[#5]

First off @shutter these two issues are NOT related. The warning given by Firefox and others in relation to the OP is to warn you that you are logging in to a non secure site and as a consequence your details may be exposed.

What you are seeing it related to the handling of the digital certificate from the nationwide site, as I have already said there is nothing wrong with this site or certificate and when using a http url to get to the nationwide site I am automatically redirected to the https one as I showed you in my previous screen shots.

[#6]

Try again using the original browser - maybe a certificate had expired & has since been fixed.

[#7]

@Anonymous

---

@Anonymous wrote:

First off @shutter these two issues are NOT related. The warning given by Firefox and others in relation to the OP is to warn you that you are logging in to a non secure site and as a consequence your details may be exposed.

What you are seeing it related to the handling of the digital certificate from the nationwide site, as I have already said there is nothing wrong with this site or certificate and when using a http url to get to the nationwide site I am automatically redirected to the https one as I showed you in my previous screen shots.

---

I don`t understand....

You are saying I am trying to log in to a non secure site.... no... I am trying to access a secure site... on which I will be able to "log in" to my account.   as you say, there is nothing wrong with the security certificate, as proved by the internet explorer pics previously shown in the o.p.

Like you when I put  in the www.nationwide.co.uk manually, it changes to https ... ( secure site )..

Am I being "thick" or just stupid.... I understand that others are not having this problem... hence my post, because, like them,... i would like not to have the problem...

[#8]

@VileReynard - The certificate was issued on the 19 Oct 2017 so it should have been the latest one when visited on the 25th of Dec.

[#9]

@VileReynard  obviously not reading all of my post....

I have tried it with typing in to the address bar,... and also using the google search link... no bookmark or prior history is involved.

I have also tried via wired connection to the router and via wireless connection to the router... all are same result.. only Internet Explorer will give me access to my bank site.

[#10]

@shutter - This problem appears to be yours and so far only yours. I am not saying you're trying to log in to a non secure site, please read the post again.

You're not being thick I can understand why it's confusing when you're seeing what you're seeing. It may be an idea to move this to a thread of it's own as it is unrelated to the OP.

[#11]

@Anonymous Quite probably, it is my own fault, and my problem... but... I am a drowning man here, and I am asking for help and advice on how to fix it.. ( chuck me a lifebelt, or send the RNLI out to me )

In other words.... how do I make my connection secure ? so that I don `t get this message when trying to access the bank site from Cyberfox or Firefox.....

Simple step by step instructions please.... 

p.s.  This is a NEW thread...  ! 

[#12]

---

shutter wrote:

p.s.  This is a NEW thread...  ! 

---

I honestly don’t know what to say @shutter, the others that have tested it get the same result as I do and indeed what you should be getting. But how to fix what you are seeing is another matter as I do not know what is causing it.

With that said you might want to read your email, it may or may not be of use in this instance.

[#13]

@shutter

I'm sorry but I have nothing to add except to suggest that you re-install Firefox. I use Firefox Quantum 57.03 with the HTTPS Everywhere extension. I also bank with Nationwide and get no warning messages.

[#14]

or try it with No addons

[#15]

@shutter - What @Baldrick1 says may well be worth trying, after all you've nothing to lose by doing it. But as it's Windows after you've removed the browser, and any associated data restart Windows before you reinstall a newly downloaded version. I know you know but you'll get it here.