My window to the world


Telecom enforces SSL email, uses wrong name in certificate

By Mauricio Freitas, in , posted: 17-Mar-2014 19:12

There’s no end in sight for Telecom email users. While the company’s move to require the use of SSL for email access (Really, all those email passwords were transmitted in the clear over those WiFi access points around the world up until now?) is a Good Move™, the fact they got the SSL certificate with the wrong server name is troubling.

Apparently this certificate was issued to pop3r.xtra.co.nz instead of pop3.xtra.co.nz. People are accepting this certificate just so they can get to their emails. This is bad because I’ve seen comments such as “just accept it I need to get to my emails”.

Not everyone is seeing this error, which points to multiple servers having a good certificate and at least one of them having a bad certificate.

What happens next time these users see a certificate error? They will repeat the “just accept it” routine, thinking it’s just another small problem? Do these people actually know the implication of accepting SSL certs left, right and centre? Probably not. And here is the problem.



Other related posts:
State of Browsers Geekzone March 2014
Testing the Kingston DataTraveler Locker+ G3
Windows XP end of support: 8 April 2014






comments powered by Disqus

freitasm's profile

Mauricio Freitas
Wellington
New Zealand


I live in New Zealand and my interests include mobile devices, good books, movies and food of course! 

I work for Intergen and I'm also the Geekzone admin. On Geekzone we publish news, reviews and articles on technology topics. The site also has some busy forums.

Subscribe now to my blog RSS feed or the Geekzone RSS feed.

If you want to contact me, please use this page or email me freitasm@geekzone.co.nz. Note this email is not for technical support. I don't give technical support. You can use our Geekzone Forums for community discussions on technical issues.

Here's is my full disclosure post.

If you'd like to help me keep Geekzone going, please use this Geekzone Amazon affiliate link when placing any orders on Amazon.



Social networks presence

View Mauricio Freitas's profile on LinkedIn


My Blog by tags...

Blog...
Entrepreneurship...
Media...
Personal...
Technology...
Viral Marketing...
Web Performance Optimization...
Windows...
Windows Phone...

Other recent posts in my blog

State of Browsers Geekzone Mar...
Free speech...
Testing the Kingston DataTrave...
Windows XP end of support: 8 A...
Take a bit of time to cleanup ...
Geekzone is a 2013 ESET NetGui...
Telecom NZ 2014 New Year decis...
Spammers on LinkedIn...
Verizon Wireless… In We...
Small annoyances with communit...

New posts on Geekzone