As from this morning I could no longer access my ANZ bank in Australia logon via Firefox which I always use. I can through Chrome and Edge but not Firefox. This is the message I get...

Did Not Connect: Potential Security Issue

Firefox detected a potential security threat and did not continue to login.anz.com because this website requires a secure connection.

Anyone else have a similar problem?

 

Same error here, and there seems to be a problem with their Security Certificate

 

Quote

 

https://login.anz.com/

 

Peer’s Certificate issuer is not recognized.

 

HTTP Strict Transport Security: false

HTTP Public Key Pinning: false

 

 

Edited February 21, 20224 yr by MJCM

I just checked on my iPad and there it works oke, so it seems to be a Firefox Issue!!

 

Edit: In the screen in Firefox you can click "Accept the Risk and Continue" this will add a exception for that site. But that is totally Up 2 U!

Edited February 21, 20224 yr by MJCM

nope, it's web server misconfiguration

 

Quote

* SSL connection using TLSv1.3 / TLS_AES_128_GCM_SHA256
* ALPN, server accepted to use h2
* Server certificate:
*  subject: businessCategory=Private Organization; jurisdictionC=AU; serialNumber=005357522; C=AU; ST=Victoria; L=Docklands; O=Australia and New Zealand Banking Group Ltd; CN=login.anz.com
*  start date: May 10 00:00:00 2021 GMT
*  expire date: May  9 23:59:59 2022 GMT
*  issuer: C=US; O=DigiCert Inc; CN=DigiCert EV RSA CA G2
*  SSL certificate verify result: unable to get local issuer certificate (20), continuing anyway.

 

 

and in addition to the SSL misconfiguration they also use insecure cipher.

 

Short googling revealed that DigiCert company is not added to the trusted list in some operating systems.

Edited February 21, 20224 yr by fdsa

1 minute ago, fdsa said:

nope, it's web server misconfiguration

 

 

and in addition to the SSL misconfiguration they also use insecure cipher.

So Safari in iPad is more forgiving then  Firefox on PC!

1 minute ago, MJCM said:

So Safari in iPad is more forgiving then  Firefox on PC!

yes, Firefox is definitely more security-conscious than Apple byproducts.

4 minutes ago, fdsa said:

Short googling revealed that DigiCert company is not added to the trusted list in some operating systems.

WOW this is very bad that a BANK keeps using this!!

 

 

I can login to ANZ via Firefox usjng my Android tablet but not via my PC.

4 hours ago, fdsa said:

nope, it's web server misconfiguration

https://www.ssllabs.com/ssltest/analyze.html?d=login.anz.com

 

Quote

This server's certificate chain is incomplete. Grade capped to B.

But my Firefox on W10 open the login page without warning.

Just tried this link:

https://login.anz.com/internetbanking

 

Edited February 21, 20224 yr by KhunBENQ

I got a new laptop and decided to try Firefox. I was having problems with logging on to my Nord VPN,  I never had any problems with my VPN before, and could not figure it out, then it occurred to me that it could be Firefox. switched over to Google and it worked fine, 

1 hour ago, sirineou said:

switched over to Google and it worked fine, 

i.e. Google Chrome didn't care about something that Firefox did.  ????

Just signed into ANZ on Firefox just now using my 3bb connection and no dramas.   May have been a lapsed certificate or firefox having one of its many strokes.

9 hours ago, JetsetBkk said:

i.e. Google Chrome didn't care about something that Firefox did.  ????

But I was not running Google at the time , but maybe it did something in the background. , I would not put it past them. 

But I don't know much about these things. ????

It seems the logon is back with Firefox.