How to solve this security lack? (Solved)

For discussions about security.
Post Reply
Message
Author
User avatar
pp4mnklinux
Posts: 375
Joined: Fri 23 Aug 2013, 06:56

How to solve this security lack? (Solved)

#1 Post by pp4mnklinux »

When I visit this site:

https://cifes.aragon.es/modulos/unaacti ... idad=17468

with Firefox, this message appears:
Your connection is not secure

The owner of cifes.aragon.es has configured their web site improperly. To protect your information from being stolen, Firefox has not connected to this web site.

Learn more…

Report errors like this to help Mozilla identify and block malicious sites
what can I tell to the owner of this site to solve this problem FOREVER?

Thanks a lot....
Distro: xenialpup64 7.5 XXL
Desktop Panel: JWM ~ FbBox 5.0

User avatar
Flash
Official Dog Handler
Posts: 13071
Joined: Wed 04 May 2005, 16:04
Location: Arizona USA

#2 Post by Flash »

I think it's trying to tell you something. I get the same warning, using 32-bit Firefox Quantum (62.0.3). Which version of Firefox are you using?

When you get the warning, you should check the box that tells Firefox to report the warning to Mozilla so it can be checked out, so see if the site is a malicious one.

s243a
Posts: 2580
Joined: Tue 02 Sep 2014, 04:48
Contact:

#3 Post by s243a »

Flash wrote:I think it's trying to tell you something. I get the same warning, using 32-bit Firefox Quantum (62.0.3). Which version of Firefox are you using?

When you get the warning, you should check the box that tells Firefox to report the warning to Mozilla so it can be checked out, so see if the site is a malicious one.
I often get warnings about expired certificates to sites and the only way to view them is to add a security exception. I don't like this because I think that security exceptions should automatically expire in about a day. I don't believe this is the case.

User avatar
8Geee
Posts: 2181
Joined: Mon 12 May 2008, 11:29
Location: N.E. USA

#4 Post by 8Geee »

the main page of aragon.es is not encrypted.
Therefore there is transmission of encrypted data through unencrypted pathways.

Every page accessible must be encrypted.

Regards
8Geee
Linux user #498913 "Some people need to reimagine their thinking."
"Zuckerberg: a large city inhabited by mentally challenged people."

User avatar
Burn_IT
Posts: 3650
Joined: Sat 12 Aug 2006, 19:25
Location: Tamworth UK

#5 Post by Burn_IT »

That reminds me of the time the security people at one of the places I worked sent for a "protected" device to be specially delivered by Securicor.
It was delivered and left on the counter in reception when no-one was around at that moment.
I spotted it and told our security people it was there. It was still there 4 hours later when I went home.

Heads did roll.
"Just think of it as leaving early to avoid the rush" - T Pratchett

musher0
Posts: 14629
Joined: Mon 05 Jan 2009, 00:54
Location: Gatineau (Qc), Canada

#6 Post by musher0 »

Hello all.

That's what you get when you delegate too many tasks to robots: stupid
evaluations. Sorry for being so frank.

I do not know Spanish. But it's close enough to Latin and to French that I can
recognize some words. Plus everyone can now access DeepL Translator.

If I'm not mistaken, that is the site for the Dep't of Education of the gov't of
the province (to use a Canadian comparison) of Aragon in Spain.

I doubt that such a site would present a danger. If it does, all kids in Aragon
are in deep trouble.

Maybe the Mozilla devs should send an e-mail to double-check? The
coordinates are all there at the top left of the page.

Also the prof in charge of this course is named. It should be easy enough
to send him an e-mail asking if his page is going to steal any info for his
"Basic Course on Localisation". :twisted:

My 2¢.
musher0
~~~~~~~~~~
"You want it darker? We kill the flame." (L. Cohen)

musher0
Posts: 14629
Joined: Mon 05 Jan 2009, 00:54
Location: Gatineau (Qc), Canada

Re: How to solve this security lack?

#7 Post by musher0 »

pp4mnklinux wrote:When I visit this site:

https://cifes.aragon.es/modulos/unaacti ... idad=17468
(...)

what can I tell to the owner of this site to solve this problem FOREVER?

Thanks a lot....
Hi, pp4mnklinux.

In direct answer to your question (i.e. what I'm trying to say in my
previous post):
-- don't tell anything to the owner of the site; ;)
-- give a mouthful to the Mozilla devs, though.
Tell the world if necessary that the Mozilla code is NOT doing a thorough
job double-checking the sites they robotically block. Their code is not
seeing what even a human who does not know the language the site is
written in can see.

Other notes, if it may help:
-- the old opera 12.16 and the new Vivaldi 1.14 take their own sweet time
to load the page, but do not mention an invalid certificate;

-- links2 stops to mention the invalid certificate, but if you allow it, it
loads the page in a wink.

BFN.
musher0
~~~~~~~~~~
"You want it darker? We kill the flame." (L. Cohen)

User avatar
pp4mnklinux
Posts: 375
Joined: Fri 23 Aug 2013, 06:56

Thanks a lot

#8 Post by pp4mnklinux »

Hello everybody and THANKS.

The problem must be with my FF version cos I can open this site with others (FF 6.0.3 X64) although some friends have the same problem with his/her Iphone BROWSER.


THANKS A LOT FOR YOUR HELP.
Distro: xenialpup64 7.5 XXL
Desktop Panel: JWM ~ FbBox 5.0

purple379
Posts: 157
Joined: Sat 04 Oct 2014, 22:23

What location are you logged in at?

#9 Post by purple379 »

I see the same message while trying to use public WiFi and needing to get to the privacy screen or garden wall, login screen of the public WiFi provider.

Post Reply