In reply to a post by PaulKirby:

So Edge and IE are having the insecure issue as Chrome and Firefox, the only difference is that IE and Edge don't stop your browser.

I just went in using Chrome with no problem.

In reply to a post by tialaramex:

In reply to a post by PaulKirby:

Well it depends on where you get your certs from, I can as far as I know still request verified certificate with a signature hash algorithm of sha1, not that I would do that.

I know I made a mistake about a year ago when I typed in sha1 instead of sha256 and they issued them fine, I then started playing with other flags like key sizes to see how high I could get it before they moaned, got bored at 32768 Bit keys, plus I didn't want to annoy the issuer

If your certificates come from a public CA (ie they'd be trusted in somebody's web browser) then lots of people would be very interested in seeing a SSL/TLS certificate issued "a year ago" (or today) using SHA1 because this would be a violation of root programme policy and of the Baseline Requirements.

Of course if "a year ago" actually means "It might have been 2015", or if your issuer is only trusted in some poxy local system, like at a bank or somewhere else that doesn't take security as seriously as the Web does then never mind.

Well mine are from a Verified CA, but also remember being able to select SHA1 hash signing when I was requesting the first CERT, lucky I was able to change it.

I just checked the command line args and its no longer has the hash signing args there, the rsa key size args are still there which it should be.

So maybe they realised they hadn't updated it and now its changed.

The issuer of my CERTS are Authority X3 level and its issuer is listed as CA X3.

It was either end of 2015 or start / mid 2016 that I got my first CERT.

Paul

In reply to a post by RobertoS:

In reply to a post by PaulKirby:

So Edge and IE are having the insecure issue as Chrome and Firefox, the only difference is that IE and Edge don't stop your browser.

I just went in using Chrome with no problem.

Well mine stopped me with a popup saying this site isn't secure and gave you an opting to ignore the warning and enter the site.

I told it to ignore the warning and also ticked the box and it now lets me in every time but still says in the URL bar "Not secure" in red text.

Paul

Nothing like that. Zilch.

Version 56.0.2924.87
Google Chrome is up to date

Edit: Ah - wait ...
Edit 2: The contents of the URL bar start with a small circle containing the letter "i". Pure black and white. Nothing to raise alarm.

Clicking it gives a low-key warning that the site isn't secure, with a "Learn more" button.

That button merely says the link is not secure, saying the URL starts with http. It then recommends to try altering it to https, and if that doesn't work to contact the site owners and request them to secure the link.

Nothing about the greater security and certificate issues that are being discussed in the thread.

Edited by RobertoS (Wed 01-Mar-17 17:52:49)

Your viewing the non secure version of the dsl checker.

Now try: https://www.dslchecker.bt.com/ which is what we are on about.

Paul

Are you sure that's what the OP was on about? I shall reply to him asking .

Edit: But yes, now I see. In Chrome but not IE11.

Edited by RobertoS (Wed 01-Mar-17 18:50:03)

In reply to a post by adslmax:

Very odd as firefox, google, internet explorer told me to get out of this site, not connected to secure!

https://s16.postimg.org/hpzpb6erp/dslchecker.jpg

Were you using

http://www.dslchecker.bt.com/adsl/adslchecker.welcome
or
https://www.dslchecker.bt.com/adsl/adslchecker.welcome

?

https://www.dslchecker.bt.com

also type in google site 'dsl checkers' and it come out at the top with https://www.dslchecker.bt.com

But now I am using this one instead: http://www.dslchecker.bt.com and it all working ok.

How to change google search to force to use this address instead: http://www.dslchecker.bt.com for future search?

Edited by adslmax (Wed 01-Mar-17 21:37:48)

Don't use google search. Simply favourite/bookmark the one that works.

Alternatively, come back to this post and click this link.

good idea, thanks robertos