Non- Secure connection warning message

[#1]

Connection routes... ( as I understand them )...

Laptop > wifi> Router > telephone line> Plusnet Server> wider intenet...... Browser  (( firefox )) > search on google. re-direct to https site  access blocked due to insecure connection

OR

Laptop > wired link to Router > telephone line> Plusnet Servier> wider internet.......Browser  ((cyberfox)) > search on google.  re-direct to https site.  access blocked due to insecure conneciton

somewhere along that line... is an "insecure connection"...  

however... >>>>>>>>>>>>>>>>>>>>>>>>>>using          wider internet ..... Browser (( Internet Explorer))    search on google .  redirects to site "securely"...

[#2]

I was reading on Mr Google that add ons can confuse web page security , like here it warns some images may not be secure and also mentions that some CSS styles can cause this aswell , could it be Shutters stylish settings the cause ? @Anonymous

[#3]

The certificate is not a problem when using Internet explorer ...

[#4]

@rongtw  Its doubtful... as you can see,... other sites... including PN ( the page this is writ on )  and my Flickr page

show the green padlock,.... and the words Secure connection

[#5]

@shutter yes there something very strange going on , but i am no expert

[#6]

---

@Anonymous wrote:

It is weird @Baldrick1 as the link @shutter provided above says the issuer is Symantec so you should not be seeing that it's validated by Kaspersky as there is only one issuer, in this case Symantec.

---

I don't pretend to have any knowledge of how certification works but it occurs to me that there could be two levels involved. First is a Certification Authority who issues certficates. I believe that Symantic is one such issuing authority. At the working level local computers need a way of checking or verifying that the certificate is genuine. Hence it is reasonable, in my case, for Kaspersky to verify a certificate issued by Symantic. Note that Kaspersky has only verified my certificate.

@Anonymous Do you by any chance use Symantic internet security? If so it would fit if Symantic both issued and verified the certificate. 

If this theory turned out to be correct it could be the crux of the @shutter problem being a combination of both browser and verification authority.

But this is only a wild theory!

[#7]

@Baldrick1  Yeah... I kinda understand your wild theory.... but... thousands of people using FIREFOX and accessing Nationwide site... surely what is happening to me... would be happening to them also....  ? ? ? ?  Yet.. as other users have posted in this thread... it ain`t....

[#8]

@Baldrick1 No I don’t use any form of Internet security, and even if I did it certainly would not be Symantec or Kaspersky. When it comes to HTTPS / SSL it is the the responsibility of the Client to validate the certificate, I know this from writing my own SSL enabled clients, but in this instance the Client is the browser.

I assume you are seeing what you are because you are running their software, that I assume includes some form of plug-in that presents the Kaspersky AV Personal Root Certificate as a trusted CA.

If I were @shutter I would go to the nationwide site and try to see what information I could extract as regards the certificate using the ‘More Information’ or other options as presented at the time. Screen captures of what is seen might be useful.

[#9]

@shutter just for comparison this is what i see in the more information tab

[#10]

@Anonymous. Thanks for putting me right, it is much appreciated.

if I get this right, the browser is the Client, but the verification authority can be modified by browser plug ins, in my case swapping Symantic for Kaspersky. This begs the question: what plug ins is @shutter is using and what happens if they are disabled?

[#11]

@Anonymous See reply number 33 on this page... ! for screen shot of the Nationwide site..... as accessed using Internet Explorer.

I have no doubt that Nationwide Certificate is genuine....  as shown by others who are accessing the site by FIrefox... the certificate is not for ME to question... but is being questioned by FIREFOX and CYBERFOX  but not being questioned by INTERNET EXPLORER 

Why is the certificate acceptable to Internet Explorer on my "insecure connection" as notified by FIREFOX and CYBERFOX on MY machine ?

Incidentally. I changed over my HDD for a test and it sill shows the insecure message... so.. it is something on MY machine... MY wifi.... MY wired connection, MY router... or whatever... that is causing the problems with FF and CYfox   and yet... Internet Explorer using all the same machines/connections has no problem..

[#12]

Sorry, I can see that @shutter but that's not what I was asking, I should maybe have said when using a browser other than I.E. so we can maybe get an idea as to why the browser thinks the client is insecure. Can you confirm that your Windows installation is patched with the latest update(s) and service packs?

Also, IIRC you have a Linux Mint install, what do you get when you visit the site with that? If the site shows without error then you can eliminate everything else you question above as it points the finger directly at your Windows 7 installs.

[#13]

---

Mook wrote:  If the site shows without error then you can eliminate everything else you question above as it points the finger directly at your Windows 7 installs.

---

So is my browser plug in theory dead in the water?

[#14]

I'm not to sure why you are asking this @Baldrick1?

[#15]

@Anonymous I thought it might have been worth @shutter trying disabling all his Add-Ons as theorised here: https://community.plus.net/t5/Tech-Help-Software-Hardware-etc/Non-Secure-connection-warning-message/m-p/1505383#M80912. If you believe that this would be a waste of time then I bow to your judgement.