Ask HN: Why mobile Chrome says HTTPS site is not secure?

Posted by gtirloni on Saturday October 08, 2022 @12:29PM
from the ask-hn dept.

It happens often (at home, mobile or random wifi networks): Chrome shows a warning that a website is not secure and asks if I want to proceed. I do and the website shows the lock icon and the certificate is valid.

It just happened with HN.

What gives?

( 6 comments | on HN )

Re:Ask HN: Why mobile Chrome says HTTPS site is not secure? by emedchill on Saturday October 08, 2022 @12:36PM (#33133720)

Without you proving an example, my best guess is that the site is using weak ciphers or old SSL/TLS versions. Technically, it has some security but not good enough by today's standards.

If you run into that issue again, try running it though https://www.ssllabs.com/ssltest/

[ Parent | on HN ]

Re:Ask HN: Why mobile Chrome says HTTPS site is not secure? by emedchill on Saturday October 08, 2022 @12:40PM (#33133773)

It could also be that your phone has some sort of MITM or packet sniffing program that is doing an insecure redirect, capturing your intended destination then sending you to it.

[ Parent | on HN ]

Re:Ask HN: Why mobile Chrome says HTTPS site is not secure? by gtirloni on Saturday October 08, 2022 @03:14PM (#33135103)

Could a captive portal be doing that? How would it capture my request? Maybe DNS intercept that redirects me to some of its servers before doing a redirect?

I don't think I have an app sniffing my phone. It's not rooted and it happens semi-randomly.

[ Parent | on HN ]

Re:Ask HN: Why mobile Chrome says HTTPS site is not secure? by gtirloni on Saturday October 08, 2022 @03:12PM (#33135083)

I mentioned it happened on HN (news.ycombinator.com) just before I posted this submission.

[ Parent | on HN ]

Re:Ask HN: Why mobile Chrome says HTTPS site is not secure? by josephcsible on Saturday October 08, 2022 @03:24PM (#33135197)

What happens if you go to an insecure site like http://neverssl.com/ on the same device and browser?

[ Parent | on HN ]

Re:Ask HN: Why mobile Chrome says HTTPS site is not secure? by gtirloni on Sunday October 09, 2022 @07:04AM (#33139902)

Nothing, it just opens it.

[ Parent | on HN ]