Google Mail Certificate

[enjay]

Is anyone else getting messages when accessing Google Mail that the certificate has expired?

[Devontechie]

Is anyone else getting messages when accessing Google Mail that the certificate has expired?

 

Don't get an error when I go into Google Mail.

 

Steve

[enjay]

I've just tried a few other computers, and it seems it is only my one on which it does this. Edited December 17, 2009 by enjay

[FN-GM]

Don't get an error when I go into Google Mail.

 

Steve

 

I can confirm this

[6Foot2]

I use GoogleMail and I am not getting this.

[enjay]

So how come I am then? most bizarre...

[sjl]

Is your time wrong on your computer?

 

You could get certificate error if someone is performing a Man in the Middle attack on you and presenting you with a forged certificate. I wouldn’t login if the certificate has an error on it.

[enjay]

The time is correct.

 

Norton AV is reporting an "unauthorised access logged (access thread data)" but says the reaction was to log it, and that no actions were available for it.

 

It seems like Firefox doesn't return the message, but IE and the Google Notifier do. How weird is that?!

[powdarrmonkey]

Google Mail is load-balanced (many, many times) so you've probably just landed on a different front-end server to everyone else.

 

Anyway, to the problem: an expired certificate isn't a problem in itself, it just means the issuer isn't prepared to certify that Google are Google any longer. You can probably override it without a problem. Other inconsistencies do indicate a man-in-the-middle attack, and you should not proceed under any circumstances.

[fiendishlyclever]

I had certificate errors on Google when I used the Remember the Milk gadget. I seem to recall checking on Firefox to see where all the page components had come from - the ones for my todo list weren't https.

 

I went back to using Google Tasks instead since there wasn't a huge improvement to be had from using Remember the Milk (from within GMail anyway).