Problem with site certificate

[Derek Broughton]

iodine at runbox.no wrote:

> Ray Parrish wrote:
>> Hello,
>> 
>> I just tried to access my US Bank online account's Bill Pay page, and
>> it returns the following error message -
>> 
>> billpay.usbank.com uses an invalid security certificate.
>> 
>> The certificate is not trusted because it is self signed.
>> The certificate is only valid for <a id="cert_domain_link"
>> title="localhost.localdomain">localhost.localdomain</a>
>> (Error code: sec_error_untrusted_issuer)
>> 
>> I do not get the error on any of their other pages, and I went into
>> Firefox Preferences and tried to turn off checking for site
>> certificates, but this did not work.
>> 
>> Anybody have any clue what is going on here?
> 
> You should take it up with your bank. No bank should use self signed
> certs. They changed how Firefox 3 handles untrusted certs, so it's a
> bit of a PITA..

As it should be.  I have a tendency to ignore these errors - most 
"secure" sites don't need to be anyway - but a bank damned well better 
have proper certificates, and if this isn't an error on their part, 
you're probably being hacked.  Definitely talk to your bank before doing 
any more online banking.
-- 
derek