|
Title: Did TradeHill change their SSL certificate? Post by: BitSense Informatics on August 19, 2011, 05:23:41 AM Safari is now telling me it doesn't trust the ssl certificate on the TradeHill and my java API application is telling me that it doesn't recognize the Root certificate. I've sent a query to TradeHill tech support but was wondering if anyone else has noticed any issues.
Title: Re: Did TradeHill change their SSL certificate? Post by: Maged on August 19, 2011, 06:26:29 AM That is concerning, especially since this would be the best time to hack a Bitcoin site (or at least its domain) since everyone in the Bitcoin world is in NYC for the Bitcoin conference. I would advise not logging in until the conference has concluded or we have heard from someone at Tradehill that can be verified. Most likely nothing is amiss, but it's hard to say with all the hackers we have here.
Title: Re: Did TradeHill change their SSL certificate? Post by: garton on August 19, 2011, 06:31:19 AM Chrome doesn't say anything about a new certificate, nor that it doesn't trust it. What page to you go to? Front page?
Title: Re: Did TradeHill change their SSL certificate? Post by: Kermee on August 19, 2011, 06:58:54 AM Looks like a new wildcard cert was issued 08/11/2011, 7 days ago...
Cheers, Kermee Title: Re: Did TradeHill change their SSL certificate? Post by: EricJ2190 on August 19, 2011, 07:16:17 AM I get no error. The SHA1 fingerprint of the certificate I get is bf5d728ac70686806c6fe7da2a7f1fe98daf98f1.
Title: Re: Did TradeHill change their SSL certificate? Post by: Kermee on August 19, 2011, 07:23:02 AM I get no error. The SHA1 fingerprint of the certificate I get is bf5d728ac70686806c6fe7da2a7f1fe98daf98f1. I've got the same fingerprint here. -- Looks legit. Safari is now telling me it doesn't trust the ssl certificate on the TradeHill and my java API application is telling me that it doesn't recognize the Root certificate. I've sent a query to TradeHill tech support but was wondering if anyone else has noticed any issues. Try loading this page: https://www.sffutureroot.com/ Do you get a similar error? Cheers, Kermee Title: Re: Did TradeHill change their SSL certificate? Post by: Grouver (BtcBalance) on August 19, 2011, 09:32:40 AM At my end Chrome says the SSL certificate is legit but the page contains data that is not loaded in via HTTPS and may be insecure.
This is only when your logged in though. Title: Re: Did TradeHill change their SSL certificate? Post by: Jered Kenna (TradeHill) on August 19, 2011, 01:44:57 PM Good Morning Folks,
We are aware of this issue and working on it today. Basically, the new web server software we're using isn't properly sending the entire certificate chain and therefore some browsers do not trust our certificate. The cause of this was the reconfiguration of our data center that took place yesterday. Regards, Adam - Tradehill Title: Re: Did TradeHill change their SSL certificate? Post by: Phinnaeus Gage on August 19, 2011, 01:49:31 PM Good Morning Folks, We are aware of this issue and working on it today. Basically, the new web server software we're using isn't properly sending the entire certificate chain and therefore some browsers do not trust our certificate. The cause of this was the reconfiguration of our data center that took place yesterday. Regards, Adam - Tradehill +1 That's how customer service is supposed to work. Title: Re: Did TradeHill change their SSL certificate? Post by: BitSense Informatics on August 19, 2011, 02:12:51 PM Ok thanks Adam. I was hoping nothing was amiss, but just wanted to be extra careful, especially given recent events.
Rob Title: Re: Did TradeHill change their SSL certificate? Post by: Grouver (BtcBalance) on August 19, 2011, 02:35:45 PM Good Morning Folks, We are aware of this issue and working on it today. Basically, the new web server software we're using isn't properly sending the entire certificate chain and therefore some browsers do not trust our certificate. The cause of this was the reconfiguration of our data center that took place yesterday. Regards, Adam - Tradehill +1 That's how customer service is supposed to work. Awesome stuff. Now I hope they will return my email these days. :( |