Untrusted Connection?

Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

aSILENTfire

Thread Starter
Joined
Mar 9, 2012
Messages
142
I want to try to check to see if my Windows Update on my Windows 8 PC is up-to-date, but both: https://www.update.microsoft.com/microsoftupdate and https://windowsupdate.microsoft.com Tell me its an untrusted connection with this message: This Connection is Untrusted You have asked Firefox to connect securely to www.update.microsoft.com, but we can't confirm that your connection is secure. Normally, when you try to connect securely, sites will present trusted identification to prove that you are going to the right place. However, this site's identity can't be verified. What Should I Do? If you usually connect to this site without problems, this error could mean that someone is trying to impersonate the site, and you shouldn't continue. I've noticed that most sites 99% don't have trusted certificates.. I would like to know if there is a way I can update my certificates.. I'm not sure if this belongs in the security form or here but I bet someone knows here.
 

dvk01

Derek
Retired Moderator Retired Malware Specialist
Joined
Dec 14, 2002
Messages
56,452
You cannot use those sites to update W8
you MUST use the inbuilt updater in W8

You cannot use Firefox to connect to windows update, the messages you are getting are due to Firefox refusing to recognize Microsoft signed certificates

There is no problem, just Firefox being its usual stupid self & Mozilla refusing to recognize certain root certificate issuers.

part of the problem is that Microsoft keep changing update locations & internally divert you to correct update site for your OS. The older sites don't exist any longer & the certificates have only been issued for the newer sites. The old sites automatically divert you to the new site when visiting via a browser, but any visit via a browser to the sites using W7 or W8 will result in a page just saying "use Windows update from start menu"

Use your Start menu to check for updates

Windows Update is included in Control Panel. In the future, to check for updates (or if this webpage doesn’t open Windows Update automatically):

Click the Start button, click All Programs, and then click Windows Update.
 

dvk01

Derek
Retired Moderator Retired Malware Specialist
Joined
Dec 14, 2002
Messages
56,452
There is nothing for you to worry about and there is nothing wrong with your computer with these messages from Microsoft sites
I have sent a message to the Microsoft security team to investigate it as it does appear to be a misconfiguration on the Microsoft update site and they are using the wrong certificate name
 

aSILENTfire

Thread Starter
Joined
Mar 9, 2012
Messages
142
Thanks for looking into it for me! As you've seen I have an over-active paranoia gland, and although it hasn't helped me much maybe you noticing that will end up with a bug getting fixed..

*happy ending, credits roll*
 

ChumCaster

Banned
Joined
Aug 26, 2007
Messages
24
Heads up, bad certificate at https://windows.microsoft.com/en-US/internet-explorer/download-ie as well, at least on Firefox.. Guess I'll have to look for another source for my IE...
Actually, that's a link that redirects to a malicious web site, according to Chrome. So the issue doesn't seem to be as simple as a bad certificate. The native updater in Windows works just fine. Why would anyone post an "update" site here? Windows keeps itself updated just fine, but you can always fire off an update manually, though the exact procedure differs in versions. Are there any "Windows Update" sites on the net that aren't trash thrown out for the credulous? I think not.
 

dvk01

Derek
Retired Moderator Retired Malware Specialist
Joined
Dec 14, 2002
Messages
56,452
Actually, that's a link that redirects to a malicious web site, according to Chrome. So the issue doesn't seem to be as simple as a bad certificate. The native updater in Windows works just fine. Why would anyone post an "update" site here? Windows keeps itself updated just fine, but you can always fire off an update manually, though the exact procedure differs in versions. Are there any "Windows Update" sites on the net that aren't trash thrown out for the credulous? I think not.
Total rubbish!
get your facts straight before you post a load of nonsense.
Learn to read the entry in chrome before you jump to unwarranted conclusions.
What is wrong is that Microsoft have used a wildcard ssl certificate for all subdomains on a subdomain.
Chrome unfortunately cannot or will not recognize wildcards on a 2nd level sub-domain

There is no redirect to an unsafe site and XP has always allowed a user to use update.microsoft.com although Microsoft have now insisted that users of W7 & W8 only use the internal updater.


As said in my previous post there is NO HTTPS:// site at the address given only a normal http:// site

if you drop the s then you get a legitimate Microsoft site
 
Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

Users Who Are Viewing This Thread (Users: 0, Guests: 1)

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 807,865 other people just like you!

Latest posts

Staff online

Top