Common Tasks

Recent Posts

Community

Email Notifications

Personal Links

Archives

Security Protection - Harry Waldron (CS)

Security Best Practices, Breaking News, & Updates

Google Crome - Flags Invalid Certificates with skull and crossbones

All browsers flag invalid trusted certificates required for the highly trusted security mode (https). The latest version of Chrome attempts to improve visible warnings for users, so they avoid visiting potentially forged sites. While IE8 also flags these issues well, users may still ignore these special warnings and visit potentially dangerous sites during phishing attacks.   

Arrgh! Yer Certificate Be Broken Matey!
http://blogs.pcmag.com/securitywatch/2010/05/arrgh_yer_certificate_be_broke.php

QUOTE: The latest development version of Google's Chrome web browser adds a skull and crossbones to the address bar when an error in an SSL certificate is detected. Previous versions just put a red slash through the "https". Getting users to notice certificate errors and take them seriously is an important web security issue, as users have become too accustomed to ignoring errors.