PDA

View Full Version : Invalid site certificate message when accessing station support


ElsaRat
08-28-2009, 10:36 AM
<p>Currently when I go to the link <a rel="nofollow" href="http://www.station.sony.com/support/?p_sid=CK_8mwGj" target="_blank">http://www.station.sony.com/support...?p_sid=CK_8mwGj</a> and click the "view your history" link to get support, I get the following message from my browser (SeaMonkey):"You have attempted to establish a connection with 'help.station.sony.com'". However the security certificate presented belongs to "@.custhelp.com". It is possible, though unlikely, that someone may be trying to intercept your communication with this web site."Firefox also complains of an invalid security certificate.Any idea what this is about? Is it related to the message of the day to change our passwords and run antivirus software (which I've done and am doing).</p>

Barx
08-28-2009, 10:41 AM
<p>It's not.</p><p>It's them having a certificate belonging to something else. custhelp.com may be the service that they use to organize their CS.</p><p>Whoever SOE's Web Prensence contractor is, they aren't exactly the best, as you can tell based on how often these forums are updated and bugs in them fixed <img src="/smilies/8a80c6485cd926be453217d59a84a888.gif" border="0" alt="SMILEY" />. The old or messed up certificates are another issue with that.</p><p>But it has nothing to do with the MOTD.</p>

Keltherin
08-28-2009, 10:43 AM
<p>^^ What he said</p><p>Ive gotten this message for a long time now (months) when accessing the support website.</p>

ElsaRat
08-28-2009, 10:48 AM
<p>Thankyou both! It's funny, if they're going to give us a message about how security is our responsibility, they ought to have their security certificates set up corrrectly and impecably.</p>

Wingrider01
08-28-2009, 04:36 PM
<p><cite>ElsaRat wrote:</cite></p><blockquote><p>Thankyou both! It's funny, if they're going to give us a message about how security is our responsibility, they ought to have their security certificates set up corrrectly and impecably.</p></blockquote><p>You are transfering between one site that has a valid SSL registered to them and another site that has a valid SSL registered to the company that they outsource the help desk support and knowledge base software. This has been explained a number of times in the tech forums</p>

Origosis
08-28-2009, 04:43 PM
<p>Pardon the Trolling here, but I have found Station.com and many linked sites to be extermely subpar in many many aspects. Alot of the Backoffice parts of the whole website work very poorly also. Even though I have all the EQ2 expansions it always offers me Shadow Odysee when I change my sub, saying i have 8/9... anyways Just wanted to Point out and bump this article, that I think Station as a whole needs ALOT of work.</p>

TSR-DanielH
08-28-2009, 05:00 PM
<p>The certificate error is caused by the system we use to track tickets.  The certificate is from the company that designed our ticket program and it gives the error since you're accessing it through our website.  I understand that it can be disconcerting, but you should be able to select 'continue anyway' without any ill effects.</p>

Kordran
08-28-2009, 06:35 PM
<p><cite>TSR-DanielH wrote:</cite></p><blockquote><p>The certificate error is caused by the system we use to track tickets. The certificate is from the company that designed our ticket program and it gives the error since you're accessing it through our website. I understand that it can be disconcerting, but you should be able to select 'continue anyway' without any ill effects.</p></blockquote><p>Of course, you have to admit from a security perspective, that's exactly the <em><strong>wrong</strong></em> answer. Telling customers to just click through security warnings, ignore them and everything will be okay is not a terribly good suggestion from any company representative.</p><p>Edit: I fully understand that there's nothing you can do personally about it, and you're providing a workaround, but this is really something that should be handled by the site admins and/or third-party service provider that you've contracted with. At the very least, it looks unprofessional. At worst, it encourages the kind of behavior on the part of users (the whole "ignore it, just click anyway" mentality) that's dangerous.</p>