Security Warnings

• 

  pegodaaj · Member · Mar 31, 2014 at 12:56 am

  • Copy link
  • Add topic to favorites

  Greetings: Some people have been reporting they are getting security errors and warnings when trying to visit my webpage tonight, specifically my latest blog posting; http://andrewpegoda.com/2014/03/30/mirror-mirror-on-the-wall-the-united-states-u-s-christianity-and-cinema/.

  I got these same errors on my computer once tonight.

  Any idea why?

  Thanks.

  The blog I need help with is: (visible only to logged in users)

• 

  pegodaaj · Member · Mar 31, 2014 at 12:58 am

  • Copy link

  I also just got the error on my iPhone – this has never happened before.

  The error is: “Cannot Verify Security Identity: Safari cannot verify the identity of “andrewpegoda.com” Would you like to continue anyway?

• 

  jeremeylduvall · Member · Apr 1, 2014 at 4:08 pm

  • Copy link

  Hi!

  Can you confirm that this is the same error you are receiving?

  

  Also, does this only happen when you view your site over an HTTPS connection like:

  “Mirror, Mirror on the Wall”: The United States, U.S. Christianity, and Cinema

  or also when you use a traditional HTTP prefix like:

  “Mirror, Mirror on the Wall”: The United States, U.S. Christianity, and Cinema

  Let me know!

• 

  pegodaaj · Member · Apr 3, 2014 at 3:44 am

  • Copy link

  Thanks for the reply.

  Yes. That’s the error I’m getting. And it looks like the error comes up with both URLs. I’ve had a half dozen people at least report issues to me and somewhat lower stats than usual. The blog I posted here http://andrewpegoda.com/2014/03/31/course-evaluations/ has also resulted in a few errors on my end.

  Thanks for your help :)

• 

  jeremeylduvall · Member · Apr 3, 2014 at 3:15 pm

  • Copy link

  Hi!

  Regarding experiencing the issue on the iPhone, is that through the WordPress App (by clicking “View Site)? If so, this is an issue we’re aware of and actively working on fixing. We have opened a thread here:

  https://en.forums.wordpress.com/topic/certificate-errors-in-wordpress-mobile-app?replies=1

  That thread will be continually updated as we move towards a resolution.

  Regarding experiencing this issue in-browser, this occurs when a visitor to your site tries to load your page over an HTTPS connection. Basically, the browser is looking for a certificate from andrewpegoda.com. Instead, it sees a certificate from your default WordPress.com address (defaultaddress.wordpress.com). The mismatch triggers an error.

  Fortunately, most users are going to be visiting your site over an HTTP connection unless they’ve set their browser up to prefer a secure connection (most haven’t). There are two ways around this:

  1. You could have them set an exception within their browser to ignore the certificate mismatch. When your husband clicks through the error, the browser sets up a temporary exception that is refreshed when he clears his cache. You can setup a permanent one within your browser settings.
  2. Avoid using an HTTPS prefix when visiting your site

  Unfortunately, it isn’t possible for us to issue a certificate that makes it possible for visitors to view your site over an HTTPS connection without first setting up an exception.

  Does that make sense?