1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Untrusted Connection?

Discussion in 'General Security' started by aSILENTfire, Feb 5, 2013.

Thread Status:
Not open for further replies.
Advertisement
  1. aSILENTfire

    aSILENTfire Thread Starter

    Joined:
    Mar 9, 2012
    Messages:
    142
    I want to try to check to see if my Windows Update on my Windows 8 PC is up-to-date, but both: https://www.update.microsoft.com/microsoftupdate and https://windowsupdate.microsoft.com Tell me its an untrusted connection with this message: This Connection is Untrusted You have asked Firefox to connect securely to www.update.microsoft.com, but we can't confirm that your connection is secure. Normally, when you try to connect securely, sites will present trusted identification to prove that you are going to the right place. However, this site's identity can't be verified. What Should I Do? If you usually connect to this site without problems, this error could mean that someone is trying to impersonate the site, and you shouldn't continue. I've noticed that most sites 99% don't have trusted certificates.. I would like to know if there is a way I can update my certificates.. I'm not sure if this belongs in the security form or here but I bet someone knows here.
     
  2. dvk01

    dvk01 Moderator Malware Specialist

    Joined:
    Dec 14, 2002
    Messages:
    56,236
    First Name:
    Derek
    You cannot use those sites to update W8
    you MUST use the inbuilt updater in W8

    You cannot use Firefox to connect to windows update, the messages you are getting are due to Firefox refusing to recognize Microsoft signed certificates

    There is no problem, just Firefox being its usual stupid self & Mozilla refusing to recognize certain root certificate issuers.

    part of the problem is that Microsoft keep changing update locations & internally divert you to correct update site for your OS. The older sites don't exist any longer & the certificates have only been issued for the newer sites. The old sites automatically divert you to the new site when visiting via a browser, but any visit via a browser to the sites using W7 or W8 will result in a page just saying "use Windows update from start menu"

     
  3. dvk01

    dvk01 Moderator Malware Specialist

    Joined:
    Dec 14, 2002
    Messages:
    56,236
    First Name:
    Derek
    There is nothing for you to worry about and there is nothing wrong with your computer with these messages from Microsoft sites
    I have sent a message to the Microsoft security team to investigate it as it does appear to be a misconfiguration on the Microsoft update site and they are using the wrong certificate name
     
  4. aSILENTfire

    aSILENTfire Thread Starter

    Joined:
    Mar 9, 2012
    Messages:
    142
    Thanks for looking into it for me! As you've seen I have an over-active paranoia gland, and although it hasn't helped me much maybe you noticing that will end up with a bug getting fixed..

    *happy ending, credits roll*
     
  5. aSILENTfire

    aSILENTfire Thread Starter

    Joined:
    Mar 9, 2012
    Messages:
    142
  6. dvk01

    dvk01 Moderator Malware Specialist

    Joined:
    Dec 14, 2002
    Messages:
    56,236
    First Name:
    Derek
  7. ChumCaster

    ChumCaster Banned

    Joined:
    Aug 26, 2007
    Messages:
    24
    Actually, that's a link that redirects to a malicious web site, according to Chrome. So the issue doesn't seem to be as simple as a bad certificate. The native updater in Windows works just fine. Why would anyone post an "update" site here? Windows keeps itself updated just fine, but you can always fire off an update manually, though the exact procedure differs in versions. Are there any "Windows Update" sites on the net that aren't trash thrown out for the credulous? I think not.
     
  8. dvk01

    dvk01 Moderator Malware Specialist

    Joined:
    Dec 14, 2002
    Messages:
    56,236
    First Name:
    Derek
    Total rubbish!
    get your facts straight before you post a load of nonsense.
    Learn to read the entry in chrome before you jump to unwarranted conclusions.
    What is wrong is that Microsoft have used a wildcard ssl certificate for all subdomains on a subdomain.
    Chrome unfortunately cannot or will not recognize wildcards on a 2nd level sub-domain

    There is no redirect to an unsafe site and XP has always allowed a user to use update.microsoft.com although Microsoft have now insisted that users of W7 & W8 only use the internal updater.


    As said in my previous post there is NO HTTPS:// site at the address given only a normal http:// site

    if you drop the s then you get a legitimate Microsoft site
     
  9. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Similar Threads - Untrusted Connection
  1. Neil8
    Replies:
    7
    Views:
    8,591
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/1088243

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice