Certificate warning is too panicky.

[hucker]

hucker last edited by hucker

When I visit a website, one I trust, in this case Krembil Research World Community Grid, a respectable research company in Canada, and their certificate has expired, I do not want Opera forcing me not to see it. I'm a big boy now, I can make my own decisions. Let me say "visit anyway", like Firefox does.

This happens all the time, even my own ISP's webpage did it. People forget about renewing the certificate. For goodness sake give them a leeway of a few weeks!

Your connection is not private
Attackers might be trying to steal your information from www.worldcommunitygrid.org (for example, passwords, messages, or credit cards).

NET::ERR_CERT_DATE_INVALID
Help me understand
www.worldcommunitygrid.org normally uses encryption to protect your information. When Opera tried to connect to www.worldcommunitygrid.org this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be www.worldcommunitygrid.org, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Opera stopped the connection before any data was exchanged.

You cannot visit www.worldcommunitygrid.org right now because the website uses HSTS. Network errors and attacks are usually temporary, so this page will probably work later.

[alobpreis]

alobpreis @hucker last edited by

@hucker Same issue reported here:

https://forums.opera.com/topic/56807/opera-doesn-t-allow-entering-site-with-expired-certificate-net-err_cert_date_invalid

From my comment there: I guess the reasoning is that if the webmaster is careful enough to enable HSTS, they would also be responsible enough to not let the certificate expire.

[hucker]

hucker @alobpreis last edited by

@alobpreis said in Certificate warning is too panicky.:

@hucker Same issue reported here:

https://forums.opera.com/topic/56807/opera-doesn-t-allow-entering-site-with-expired-certificate-net-err_cert_date_invalid

From my comment there: I guess the reasoning is that if the webmaster is careful enough to enable HSTS, they would also be responsible enough to not let the certificate expire.

Except they're constantly expiring, I encounter one every month or two. For example i do a lot of science projects, a university with a few tech staff who have other things to attend to, or even no real tech staff but a physics professor who knows a bit about computers, has set up https so they are allowed to connect to certain secure places, then they just forget to update it. my point is, surely one day out isn't the end of the world?!