PDA

View Full Version : [Hahahaha] Dept. of Defense Website uses "Invalid Security Certificate"



Knightskye
05-21-2009, 10:13 PM
Those guys can't even maintain the security of their own website!

https://www.dmdc.osd.mil/

Maybe it'll load for you guys. I might have some program that prevents it from loading (I'm on Firefox, by the way).

http://i39.tinypic.com/24wrns1.jpg

:D
RonPaulwillWin
05-21-2009, 10:24 PM
Fail.
coyote_sprit
05-21-2009, 10:37 PM
http://www.defense.gov/

The site you are trying to go through looks like a sham.

Edit: It's government but looks like it hasn't been updated for years, just a waste of bandwidth.
specsaregood
05-21-2009, 10:45 PM
Those guys can't even maintain the security of their own website!

https://www.dmdc.osd.mil/
Maybe it'll load for you guys. I might have some program that prevents it from loading (I'm on Firefox, by the way).
:D

Not really. Anybody can generate their own ssl cert and the connection between you and the server is just as secure as if you pay one of the certificate authorities. The only difference is you don't have certificate "authority" verifying that the site is legit. If you know the site is legit, then it is no big deal. A lot of companies/people use self-generated certificates on intranets, etc because there is no real reason to pay an "authority" to do it. Those "authorities" and the browsers scaring people with messages like you see in your browser could almost be considered a scam. You will still get an encrypted connection.
hotbrownsauce
05-22-2009, 01:50 PM
This is correct....

Not really. Anybody can generate their own ssl cert and the connection between you and the server is just as secure as if you pay one of the certificate authorities. The only difference is you don't have certificate "authority" verifying that the site is legit. If you know the site is legit, then it is no big deal. A lot of companies/people use self-generated certificates on intranets, etc because there is no real reason to pay an "authority" to do it. Those "authorities" and the browsers scaring people with messages like you see in your browser could almost be considered a scam. You will still get an encrypted connection.