# Getting a bad certificate warning on my phone

**URL:** <https://boards.straightdope.com/t/getting-a-bad-certificate-warning-on-my-phone/854930>\
**Category:** About This Message Board\
**Created:** [June 2, 2020, 3:45pm UTC](https://boards.straightdope.com/t/getting-a-bad-certificate-warning-on-my-phone/854930 "2020-06-02T15:45:23Z")\
**Posts on this page:** 11\
**Page:** 2

<div class="post-metadata">

**Author:** ![Do\_Not\_Taunt](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/do_not_taunt/32/2968_2.png) [@Do\_Not\_Taunt](https://boards.straightdope.com/u/Do_Not_Taunt)\
**Post date:** [June 5, 2020, 3:29pm UTC](https://boards.straightdope.com/t/getting-a-bad-certificate-warning-on-my-phone/854930/21 "2020-06-05T15:29:03Z")

</div>

> [@Dude111](#):
>
> There is NO REASON to force HTTPS on a site like this… We are not transferring missile codes to a silo for petes sake!!!

Do you really believe only missile code transfer sites need encryption? The world is passing you by on this one - many sites are all HTTPS (as in, if you go to them on HTTP, you get a permanent redirect [HTTP 301] to the same URL but with HTTPS.) This is partially because of the SEO advantages Google now offers, but the movement predates that. It’s because the consensus opinion is that the minuscule cost - the compute time to encrypt/decrypt and the slight increase in bandwidth - is more than outweighed by the benefit: no one gets to see what I’m reading about, or sniff my cookies and spoof them, or watch my password get sent in plaintext over the wire, etc…

---

<div class="post-metadata">

**Author:** ![Skywatcher](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/skywatcher/32/254_2.png) [@Skywatcher](https://boards.straightdope.com/u/Skywatcher)\
**Post date:** [June 10, 2020, 4:26pm UTC](https://boards.straightdope.com/t/getting-a-bad-certificate-warning-on-my-phone/854930/22 "2020-06-10T16:26:11Z")

</div>

I’m back on my work laptop for the first time since Thursday. Cleared the cache, SSL cache, and cookies; still getting that certificate error here. No longer getting a warning for [conceptcarz.com](http://conceptcarz.com), though.

---

<div class="post-metadata">

**Author:** ![kaylasdad99](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/kaylasdad99/32/3398_2.png) [@kaylasdad99](https://boards.straightdope.com/u/kaylasdad99)\
**Post date:** [June 10, 2020, 9:09pm UTC](https://boards.straightdope.com/t/getting-a-bad-certificate-warning-on-my-phone/854930/23 "2020-06-10T21:09:41Z")

</div>

I complained a while back about my phone logging me out (apparently) between visits. The response was to make sure I was in https. I still encounter this on occasion, so I go to the address bar and add the s when it does. Logs me right back in.

---

<div class="post-metadata">

**Author:** ![TubaDiva](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/tubadiva/32/507_2.png) [@TubaDiva](https://boards.straightdope.com/u/TubaDiva)\
**Post date:** [June 11, 2020, 8:14am UTC](https://boards.straightdope.com/t/getting-a-bad-certificate-warning-on-my-phone/854930/24 "2020-06-11T08:14:05Z")

</div>

> [@Skywatcher](#):
>
> I’m back on my work laptop for the first time since Thursday. Cleared the cache, SSL cache, and cookies; still getting that certificate error here. No longer getting a warning for [conceptcarz.com](http://conceptcarz.com), though.

You are sure you are addressing through “https,” correct? Often when people have this problem it’s due to older bookmarks/links that they’re using to get to the site.

If indeed it is https and you are still getting this message, it makes me wonder about your equipment, your hardware and software.

How old is your computer? What operating system are you using?

What browser are you using? What vintage is it?

I realize since it’s your work machine you may not have control over what’s on it but I have been receiving occasional notices from people with older computers and older operating systems that they are having problems accessing the site. This is one of the ways that this is happening; older stuff won’t parse the page.

We’ve had this problem in the past but not in a long while. It’s perhaps a reflection of how technology is again changing and leaving vintage hardware and software behind.

Jenny

---

<div class="post-metadata">

**Author:** ![Melbourne](https://avatars.discourse-cdn.com/v4/letter/m/b5e925/32.png) [@Melbourne](https://boards.straightdope.com/u/Melbourne)\
**Post date:** [June 11, 2020, 9:05am UTC](https://boards.straightdope.com/t/getting-a-bad-certificate-warning-on-my-phone/854930/25 "2020-06-11T09:05:42Z")

</div>

> [@Cleophus](#):
>
> This is very wrong. In an age of pervasive web monitoring HTTPS protects user privacy and increases security by preventing malicious tampering with web content, plus browsers increasingly restrict insecure content. HTTPS is now the default on the Internet and the SDMB is way behind best practice in not automatically redirecting the SDMB the same way it redirects the SD home page.

HTTPS is a way of ensuring advertising delivery, and has been strongly encouraged by the delivery of browsers from companies that benefit from advertising.

My personal aversion to advertiser-enforced HTTPS is related to a small part of the embedded/IOT, remote site, and 3rd world parts of the web, and has nothing to do with SDMB. But since I do have a personal aversion to the way HTTPS is making my life more difficult, it irritates me to see the same worthless changes foisted onto to the SDMB.

By the way, I stopped using HTTP for SDMB when SDMB stopped supporting HTTP. I don’t know why it was re-enabled, but I’ve always wondered if that was associated with the hosting problems we’ve seen: Some sites have reported excessive (artificial) loads on their HTTP hosts.

---

<div class="post-metadata">

**Author:** ![Skywatcher](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/skywatcher/32/254_2.png) [@Skywatcher](https://boards.straightdope.com/u/Skywatcher)\
**Post date:** [June 11, 2020, 3:01pm UTC](https://boards.straightdope.com/t/getting-a-bad-certificate-warning-on-my-phone/854930/26 "2020-06-11T15:01:53Z")

</div>

> [@TubaDiva](#):
>
> You are sure you are addressing through “https,” correct?

Right. I have to remove the “s” to access the boards from work.

> [@](#):
>
> How old is your computer? What operating system are you using?

Eight year old Dell laptop running Win 10.

> [@](#):
>
> What browser are you using? What vintage is it?

I’ve tried Chrome (version 79) and Internet Explorer (version 11), both do the same thing.

---

<div class="post-metadata">

**Author:** ![Do\_Not\_Taunt](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/do_not_taunt/32/2968_2.png) [@Do\_Not\_Taunt](https://boards.straightdope.com/u/Do_Not_Taunt)\
**Post date:** [June 11, 2020, 3:47pm UTC](https://boards.straightdope.com/t/getting-a-bad-certificate-warning-on-my-phone/854930/27 "2020-06-11T15:47:37Z")

</div>

> [@Melbourne](#):
>
> HTTPS is a way of ensuring advertising delivery, and has been strongly encouraged by the delivery of browsers from companies that benefit from advertising.
> 
> My personal aversion to advertiser-enforced HTTPS is related to a small part of the embedded/IOT, remote site, and 3rd world parts of the web, and has nothing to do with SDMB. But since I do have a personal aversion to the way HTTPS is making my life more difficult, it irritates me to see the same worthless changes foisted onto to the SDMB.
> 
> By the way, I stopped using HTTP for SDMB when SDMB stopped supporting HTTP. I don’t know why it was re-enabled, but I’ve always wondered if that was associated with the hosting problems we’ve seen: Some sites have reported excessive (artificial) loads on their HTTP hosts.

With all due respect, what are you talking about? HTTPS has nothing to do with ads, and there’s no reason for HTTP to cause increased load on hosts.

> [@Skywatcher](#):
>
> Right. I have to remove the “s” to access the boards from work.Eight year old Dell laptop running Win 10.I’ve tried Chrome (version 79) and Internet Explorer (version 11), both do the same thing.

So the problem repros from your work laptop but not your home laptop, right? And are you using these both from your home, or are you actually going to a physical office these days to use your work laptop? Does your work laptop connect to the internet differently (ie, through a proxy or a VPN) than your home laptop? Your problem is odd, but perhaps there’s something else that is caching the certificate on your behalf.

---

<div class="post-metadata">

**Author:** ![Skywatcher](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/skywatcher/32/254_2.png) [@Skywatcher](https://boards.straightdope.com/u/Skywatcher)\
**Post date:** [June 11, 2020, 4:01pm UTC](https://boards.straightdope.com/t/getting-a-bad-certificate-warning-on-my-phone/854930/28 "2020-06-11T16:01:47Z")

</div>

My gaming area has also been my working area for the past 10 years or so. Work computer uses a VPN; home doesn’t.

---

<div class="post-metadata">

**Author:** ![Do\_Not\_Taunt](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/do_not_taunt/32/2968_2.png) [@Do\_Not\_Taunt](https://boards.straightdope.com/u/Do_Not_Taunt)\
**Post date:** [June 11, 2020, 4:14pm UTC](https://boards.straightdope.com/t/getting-a-bad-certificate-warning-on-my-phone/854930/29 "2020-06-11T16:14:20Z")

</div>

> [@Skywatcher](#):
>
> My gaming area has also been my working area for the past 10 years or so. Work computer uses a VPN; home doesn’t.

If you could try disconnecting your work computer from the VPN and any proxies, flush your local caches, and try again, it would be an interesting data point.

---

<div class="post-metadata">

**Author:** ![Melbourne](https://avatars.discourse-cdn.com/v4/letter/m/b5e925/32.png) [@Melbourne](https://boards.straightdope.com/u/Melbourne)\
**Post date:** [June 12, 2020, 3:41am UTC](https://boards.straightdope.com/t/getting-a-bad-certificate-warning-on-my-phone/854930/30 "2020-06-12T03:41:18Z")

</div>

> [@Do\_Not\_Taunt](#):
>
> With all due respect, what are you talking about? HTTPS has nothing to do with ads, and there’s no reason for HTTP to cause increased load on hosts.

HTTP doesn’t cause load on hosts: noxious spiders and other artificial loads cause problems for hosts. For some reason, there is more of this problem with HTTP clients. You can totally avoid noxious HTTP clients by not providing an HTTP service.

HTTPS has nothing to do with adds. It has to do with advertising agencies like Google/Alphabet. Are you using a Google/Alphabet funded web browser? If so, it will do things like give you a certificate error with some site configurations when forwarding to a http site from a https link, which may possibly be where we came in.

The advertising agencies supported and encouraged HTTPS for advertising reasons, which, if you ask politely, we can take to another thread, but if you wish to debate instead of inquire, I really can’t be bothered.

---

<div class="post-metadata">

**Author:** ![Skywatcher](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/skywatcher/32/254_2.png) [@Skywatcher](https://boards.straightdope.com/u/Skywatcher)\
**Post date:** [June 22, 2020, 1:40pm UTC](https://boards.straightdope.com/t/getting-a-bad-certificate-warning-on-my-phone/854930/31 "2020-06-22T13:40:45Z")

</div>

Never did clear that expired certificate on my work computer; the migration took care of it.

[Previous page](https://boards.straightdope.com/t/getting-a-bad-certificate-warning-on-my-phone/854930.md?page=1)
