Bitdefender keeps blocking a site on here

[SteviegtrParticipant @steviegtr]

When using the forum i keep getting a notice up from my Bitdefender saying.

msedge.exe attempted to establish a connection relying on an expired certificate to http://www.stubmandrel.co.uk. We blocked the connection to keep your data safe since websites must renew their certificates with a certification authority to stay current, and outdated security certificates represent a risk.

Does anyone know what this site is.

Steve.

[SteviegtrParticipant @steviegtr]

Baffled by a blocking notice

[Frances IoMParticipant @francesiom58905]

our editor hasn’t kept his security cert uptodate – stubmandrel == Neil with a different hat on

[JasonBModerator @jasonb]

That's Neil'sother username and one of his own websites

[SteviegtrParticipant @steviegtr]

Oh eck , i am sorry. Didn't want to get anyone into bother. Looking through it is when i look at a thread i started & Neil has replied to it. Sorry Neil.

Steve.

[SillyOldDufferModerator @sillyoldduffer]

Neil's https security certificate has expired and his website needs a new one.

However, Neil's site also works unencrypted, so try connecting with http rather than https, as per this link http://www.stubmandrel.co.uk

Giant but! Although we trust Neil and his website, other websites supporting http and https at the same time are a security risk to the user, possibly as a side-effect, and doing both with a dud https certificate causes red lights to flash! It creates a loophole roughly equivalent to bellowing your bank account details through a loud-hailer, which is unwise if the local scallywag might be passing. No wonder bitdefender is upset!

Knowingly connecting to an unencrypted website is safe enough provided you don't do anything during the session to release logins, passwords, account details or personal information under any circumstances. While Neil's site is benign, some of the others are honeypots, deliberately designed to collect sensitive data with a 'man in the middle' attack, or similar manipulation.

Dave

[Frances IoMParticipant @francesiom58905]

the cert only guarantees you are talking to the site you entered in the address bar – not that this site doesn’t transmit malware (even google supplied adverts have done this- if you are using a landline very very unlikely you will see a man-in-the-middle attack – internet cafes yes

The ‘vaccination’ against malware, apart from using Linux, is to keep your browser up to date

[nigel jones 5Participant @nigeljones5]

Ive used bitdefender for many years, you can add the out of date cert as an exception and it wont do it again.

[SteviegtrParticipant @steviegtr]

Posted by fizzy on 04/04/2021 19:37:51:

Ive used bitdefender for many years, you can add the out of date cert as an exception and it wont do it again.

Yes i know i can do that. The problem was i had no idea what the site was until being informed by others.

Steve.

[Author]

Posts