Users receive security error when searching for site

  • Unknown's avatar
    mydomumo · Member ·

    Hello, when searching for The Daily Arbitrage in Google, I receive a security error when trying to open page, error says:
    “You attempted to reach thedailyarbitrage.com, but instead you actually reached a server identifying itself as *.wordpress.com. This may be caused by a misconfiguration on the server or by something more serious. An attacker on your network could be trying to get you to visit a fake (and potentially harmful) version of thedailyarbitrage.com.”

    The blog I need help with is: (visible only to logged in users)

  • Unknown's avatar
    gracejiyoung · Member ·

    Hi there!

    That is actually very standard behavior and is a bit misguided (sorry about the scare!). Please note that only you and other registered users of the blog will see it when logged in.

    When you connect to your Dashboard over an HTTPS connection, we use an SSL certificate to encrypt your connection. SSL certificates need to be signed to a specific domain, and we can’t provide certificates for every mapped domain, so our certificate is signed for WordPress.com.

    When you connect to your Dashboard via your own domain but your security software sees a certificate signed to http://wordpress.com/ it’s altering you that WordPress.com may be intercepting your connection, which of course is perfectly fine.

    To prevent your readers running into this in their browsers, just make sure that whenever you provide a link to your blog or post it anywhere, that you post it as http:// and not https://.

    You can read more about this here.

  • Unknown's avatar
    mydomumo · Member ·

    It’s not just blog users, multiple people have seen it upon entering the website, from various computers and web browsers, including mobile…
    I’m sure you understand that this is a big red flag in terms of bringing in web traffic. Can I buy an SSL certificate for my domain instead of using wordpress.com?

    I am also registered with google apps, which I’m using for my emai, adwrods, and analytics– I just received this notice via email:
    Site host name, https://thedailyarbitrage.com, does not match your SSL certificate Subject Name

    We have noticed that the host name of your site, https://thedailyarbitrage.com, does not match any of the “Subject Names” in your SSL certificate, which were:

    *.wordpress.com
    wordpress.com
    As a result, many web browsers will block users from accessing your site, or display a security warning message when your site is accessed.

    Recommended action
    To correct this problem, please get a new SSL certificate by a Certificate Authority (CA) with a “Subject Name” or “Subject Alternative DNS Names” that matches your host name.

  • Unknown's avatar
    gracejiyoung · Member ·

    Hi there,

    We were just made aware of the email that went out. Our team looked into it and would like us to relay to users that WordPress.com doesn’t support ssl for mapped domains, so this error report from Google is both accurate and innocuous.

    Please note that you will not see the error if you go to:

    http://thedailyarbitrage.com

  • The topic ‘Users receive security error when searching for site’ is closed to new replies.