Possible problems looming for Chrome users

[VBF]

I just received this article in my daily "The Register"  email

 

Beware the looming Google Chrome HTTPS certificate apocalypse!

 

If you go to the list of affected websites, you can see that lazada.co.th is amongst those affected and I've noticed that many people on ThaiVisa use it
 

Edited February 9, 2018 by VBF

[Kron]

Just click pass the warning on sites your have used before. I am sure that legit sites such as lazada are working on their  HTTPS certificate .

[VBF]

16 minutes ago, Kron said:

Just click pass the warning on sites your have used before. I am sure that legit sites such as lazada are working on their  HTTPS certificate .

To a point! 

 

I  posted because the warnings will  look scary to those who haven't seen them before, AND if someone spoofs a legitimate site, it may become possible for people to effectively ignore (click through) genuine warnings. Clearly, one of the reasons certificates exist is to save users the bother of checking a website in intimate detail.

Edited February 9, 2018 by VBF

[Guest]

Fortunately there is now Let's Encrypt, which made SSL certs free and also very easy to install/handle. 

 

https://letsencrypt.org/

[OJAS]

On 2/9/2018 at 8:52 AM, VBF said:

If you go to the list of affected websites, you can see that lazada.co.th is amongst those affected and I've noticed that many people on ThaiVisa use it

But equally surprising (to me at any rate) is the fact that the 90-day reporting extranet, which many people on Thaivisa also use,  does not appear to be included in this list, bearing in mind the ominous warnings with which we are presented when trying to access it with Chrome, even with the IE extension tab. Yet another instance of a webmaster not being bothered to get their finger out to update the certificate, I gather.

[KhunBENQ]

17 minutes ago, OJAS said:

But equally surprising (to me at any rate) is the fact that the 90-day reporting extranet, which many people on Thaivisa also use,  does not appear to be included in this list,

The background is described in the article.

It's a dispute between Google and Symantec.

Symantec seems to have ignored proper rules for issuing certificates.

 

The immigration website is quite a joke, as they have done some kind of "self-certificaton" which will appear as potentially dangerous in every browser at every time.

Nothing to do with the Symantec botch.

If a site does not appear it in this list it does not necessarily mean that it is safe.