Secutrity Certificate

• 

  tomasc85 · Member · Feb 22, 2014 at 4:20 pm

  • Copy link
  • Add topic to favorites

  When trying to preview a post draft, I get this alert:

  “This Connection is Untrusted

  You have asked Firefox to connect securely to empireoflights.com, but we can’t confirm that your connection is secure.

  Normally, when you try to connect securely, sites will present trusted identification to prove that you are going to the right place. However, this site’s identity can’t be verified.
  What Should I Do?

  If you usually connect to this site without problems, this error could mean that someone is trying to impersonate the site, and you shouldn’t continue.

  empireoflights.com uses an invalid security certificate. The certificate is only valid for the following names: *.wordpress.com , wordpress.com (Error code: ssl_error_bad_cert_domain)”

  empireoflights.com is the domain I registered with WordPress. Now, is there a security problem? What’s prompting this alert? Should I be concerned? Should you be concernded?

  Thanks for your help!

  Cheers, Tobias

  The blog I need help with is: (visible only to logged in users)

• 

  jeremeylduvall · Member · Feb 25, 2014 at 9:35 pm

  • Copy link

  Hi Tobias,

  There isn’t anything to be concerned about here. This happens when you try to access your domain using the https:// prefix, which attempts to connect securely using an SSL (Secure Socket Layer) certificate. With domains registered through WordPress.com, the SSL certificate is not available, hence the error message.

  This is explained a bit more under the FAQ here (under header “How do I get those annoying security warnings to go away?”):

  http://en.support.wordpress.com/https/#frequently-asked-questions

  In Firefox, you can add an exception when the error message pops up by clicking “I understand the risks” and following the “Add Exception” button there. This will add a security exception for https://empireoflights.com/.

  Let me know if you have any additional questions!

• 

  tomasc85 · Member · Feb 28, 2014 at 10:24 am

  • Copy link

  Thank you Jeremy, this is extremely helpful. Just one additional question: Does adding the exception (as described) altogether switch off the SSL encryption?

• 

  jeremeylduvall · Member · Feb 28, 2014 at 3:27 pm

  • Copy link

  Hi Tobias!

  Adding the exception basically tells your browser that it’s okay that this particular website does not have the valid SSL certificate. However, the browser will still attempt to verify other sites and will provide warning if a valid certificate is not found. Does that make sense? It effectively switches the warning off for your personal site, but not for others.