Author Topic: minmaxboards has invalid security certificate  (Read 4518 times)

Offline The_Laughing_Man

  • Sr. Member
  • ***
  • Posts: 335
  • 笑い男
    • View Profile
minmaxboards has invalid security certificate
« on: April 15, 2014, 05:21:50 PM »
https://www.minmaxboards.com/

This Connection is Untrusted

You have asked Aurora to connect securely to www.minmaxboards.com, but we can't confirm that your connection is secure.

Normally, when you try to connect securely, sites will present trusted identification to prove that you are going to the right place. However, this site's identity can't be verified.
What Should I Do?

If you usually connect to this site without problems, this error could mean that someone is trying to impersonate the site, and you shouldn't continue.

www.minmaxboards.com uses an invalid security certificate. The certificate is only valid for the following names: *.bluehost.com, bluehost.com (Error code: ssl_error_bad_cert_domain)

Offline Kajhera

  • Hero Member
  • ***
  • Posts: 707
    • View Profile
Re: minmaxboards has invalid security certificate
« Reply #1 on: April 15, 2014, 05:32:44 PM »
Hrm ... I don't generally connect to an https version of the boards at all, and it's not what comes up on googling the site. Don't connect to it. Drop the s.

Offline Agita

  • He Who Lurks
  • Moderator
  • *****
  • Posts: 2705
  • *stare*
    • View Profile
Re: minmaxboards has invalid security certificate
« Reply #2 on: April 15, 2014, 06:30:40 PM »
I've had this error before for other legitimate sites that used nonstandard certification because it's cheaper. I think bluehost is just our host, but I'm not sure.
Do you usually connect to the https version of Min/Max, or did you do so for the first time, for whatever reason, when you got this error? I assume this is the first time you've seen this error for Min/Max.
« Last Edit: April 15, 2014, 06:36:47 PM by Agita »
Please send private messages regarding board matters to Forum Staff instead.

Offline The_Laughing_Man

  • Sr. Member
  • ***
  • Posts: 335
  • 笑い男
    • View Profile
Re: minmaxboards has invalid security certificate
« Reply #3 on: April 15, 2014, 06:48:33 PM »
It was the first time I tried https for the site. Maybe it has been like this from the start, idk.

Offline ketaro

  • Epic Member
  • ****
  • Posts: 4241
  • I'm always new!
    • View Profile
Re: minmaxboards has invalid security certificate
« Reply #4 on: April 15, 2014, 07:59:03 PM »
My browser doesn't even connect with http at the front end of the url. Just jumps straight in with www.

Offline Gazzien

  • DnD Handbook Writer
  • ****
  • Posts: 2113
  • Science? Science.
    • View Profile
Re: minmaxboards has invalid security certificate
« Reply #5 on: April 15, 2014, 10:19:53 PM »
My browser doesn't even connect with http at the front end of the url. Just jumps straight in with www.
As does mine.

Oh, hey, security thread! Anyone know if MMX was exposed to the Heartbleed error/bug?

Offline Agita

  • He Who Lurks
  • Moderator
  • *****
  • Posts: 2705
  • *stare*
    • View Profile
Re: minmaxboards has invalid security certificate
« Reply #6 on: April 16, 2014, 04:48:39 AM »
It was the first time I tried https for the site. Maybe it has been like this from the start, idk.
Just leave the s out, then, and connect to the site normally as Kajhera said. I don't think MinMax is set up for https in the first place, and hosts letting their security certificates lapse happens.

My browser doesn't even connect with http at the front end of the url. Just jumps straight in with www.
Everything connects with http by default. Your browser just doesn't show you that part at the start of the address because it's the same for each site. If you highlight your address bar and copy-paste it somewhere, you'll probably find the http is there at the start of the url.

Oh, hey, security thread! Anyone know if MMX was exposed to the Heartbleed error/bug?
No idea, I'm afraid. However, as I understand it, Heartbleed requires someone to actively try to leech data from a target, which gives us a kind of security in obscurity - MinMax is a small community, in the grand scheme of things. I wouldn't be too worried, partly because of that, partly because I doubt anyone has sensitive information stored on their account here. The big targets of Heartbleed-based security breaches are banks and similar, not hobby discussion forums.
Change your password just in case if you're worried, which is a good idea to do anyway once in a while, and make sure you aren't using your MinMax password for anything important (if you are, change those too, preferably to something other than what you change your MMX password to). If you haven't gotten an email from your bank on whether their services were compromised, call their customer service or a personal consultant if you get one and ask.
« Last Edit: April 16, 2014, 04:51:14 AM by Agita »
Please send private messages regarding board matters to Forum Staff instead.

Offline Prime32

  • Over-Underling
  • Retired Admin
  • *****
  • Posts: 2914
    • View Profile
Re: minmaxboards has invalid security certificate
« Reply #7 on: April 16, 2014, 11:25:32 AM »

Offline Kajhera

  • Hero Member
  • ***
  • Posts: 707
    • View Profile
Re: minmaxboards has invalid security certificate
« Reply #8 on: April 16, 2014, 12:10:24 PM »
It would only be the 'https' that was vulnerable to Heartbleed, to my knowledge. The other version is just plain old not secure enough to be sending sensitive information in the first place.  :p

Change your passwords in places that use OpenSSL after getting the all-clear problem-solved message. If you changed it before you got that change it again after. Otherwise, well, opportune window of time while all hackers are thinking about it and your data happens to be in site memory. If a place hasn't solved the issue, if possible, avoid using it entirely.
« Last Edit: April 16, 2014, 12:12:51 PM by Kajhera »

Offline The_Laughing_Man

  • Sr. Member
  • ***
  • Posts: 335
  • 笑い男
    • View Profile
Re: minmaxboards has invalid security certificate
« Reply #9 on: April 16, 2014, 04:40:11 PM »
^^ yes, and it only affects https sites with certain version on OpenSSL.
For more info: http://heartbleed.com/

And one can use this site to test whether one's favourite site is ok: https://filippo.io/Heartbleed/

http doesn't really provide any security so basically when logging in the username and password fly around in the internet as plain text. So.. same pw for all sites is a bad idea.

Anyway, I'd be glad to use https version.

Offline awaken_D_M_golem

  • Epic Member
  • ****
  • Posts: 7639
  • classique style , invisible tail
    • View Profile
Re: minmaxboards has invalid security certificate
« Reply #10 on: April 17, 2014, 04:09:42 PM »

... to actively try to leech data from a target, which gives us a kind of security in obscurity - MinMax is a small community, in the grand scheme of things ...

But but, where else has total Multi-Versal Domination happened !!


Quote

... I wouldn't be too worried, partly because of that, partly because I doubt anyone has sensitive information stored on their account here ...

 :o  MY   :pout  KITTY   :P  Avatar
Your codpiece is a mimic.