5:51 pm
March 15, 2019
Anybody else getting this annoying popup which prevents access to the threads/posts?
"Your connection isn't private
Attackers might be trying to steal your information from http://www.highinterestsavings.ca (for example, passwords, messages, or credit cards).
NET::ERR_CERT_AUTHORITY_INVALID"
7:49 am
December 7, 2018
No. The URL you posted doesn't have an 's' (only http://). Is that what you use? Could it be a fake site?
9:07 am
January 12, 2019
.
'Negatory' here, as well. Yes COIN, you're missing the 's'.
Personally ... I've Never had a problem with this site.
All's Well & Good @ https://www.highinterestsavings.ca/
- Note the http's': ⬆
Dean
" Live Long, Healthy ... And Prosper! "
11:20 am
April 6, 2013
This site works fine for me, through Microsoft Edge and Google Chrome browsers.
Your browser seems to not like one of the certificates from the certificate authorities in the certificate chain for this site's certificate.
Check the computer clock. If the current time is wrong, then it might look like one of the certificates is now past its valid-until date or is still before its valid-after date.
1:39 pm
November 8, 2018
COIN said
Anybody else getting this annoying popup which prevents access to the threads/posts?"Your connection isn't private
Attackers might be trying to steal your information from http://www.highinterestsavings.ca (for example, passwords, messages, or credit cards).
NET::ERR_CERT_AUTHORITY_INVALID"
This type of error message could happen when firewall/proxy tries to redirect connection elsewhere, for example to generic landing page saying "Access to this Web site is not allowed."
If it happened at public location, this could be OK: perhaps, someone does not like HISA web site and blocks it.
If that happened at your home network, you should worry: someone might be watching you. It is variation of man in the middle attack.
3:33 pm
April 6, 2013
If the computer's clock is correct, then it could be a man-in-the-middle compromise where someone is trying to insert themselves between you and the real web site using a bogus certificate for this site.
Some users will just continue with the bogus certificate. That will allow the attacker in the middle to decrypt their traffic to and from the real site.
Another possibility is the web browser is not fully up to date and doesn't trust some of the newer certificate authority certificates that are trusted by the latest release of the browser.
There should be a link in the popup, like Advanced, that should provide more details about what is wrong.
3:35 pm
December 25, 2020
8:53 am
January 12, 2019
12:37 pm
November 8, 2018
It is possible that your home computer is infected with spyware, which tries to intercept your browsing, among other things.
I would recommend to refrain from using your home computer, and especially for banking and taxes. Anything you do on it could be intercepted, including login credentials and personal information.
Immediately disconnecting that computer from the Internet, both wireless and LAN, would be wise at this point.
If you did use computer for banking and such after you saw that pop-up, it would be wise to deal with that situation as if your info was compromised. Because, it could have been.
5:32 pm
January 10, 2017
COIN said
This message is sent from a borrowed computer.I'm ok. No need to call 911. LOL!
I tried unsuccessfully to reply earlier from my home computer. Still having problems sometime accessing this and other sites.
Great, I called off the SWAT team. Seems to me your home router has security settings that are causing your problem. If you have a laptop bring it to a friend's house or a coffeeshop and see what happens. If you have a desktop, get into your router and disable security settings to test.
6:01 am
April 6, 2013
Windows, including Windows 7, has a list of trusted certificate authority root certificates that needs to be kept up to date.
If the root certificate from
CN = ISRG Root X1
O = Internet Security Research Group
C = US
is not in the computer's list of trusted roots, then one will get errors about an invalid certificate authority when connecting to a web site that uses a certificate from that certificate authority.
This site renewed its TLS certificate around January 17. There could have been a switch to a different certificate authority then.
6:41 am
November 8, 2018
6:45 am
March 30, 2017
COIN said
I'm still using Windows 7 because I'm so accustomed to it.Could that be a problem?
I do have another computer that has a fresh Windows 10 installed. Maybe I should switch to that one (although Win 10 is now superseded by Win 11)?
One of the risks of using really old OS is that once they are stopped being supported, any new security flaws will not be found nor patched.
To me this is way more dangerous than using an app on the phone....
12:11 pm
November 8, 2018
Wipe your computer clean or stop using it at all and dispose it.
4:41 am
March 30, 2017
4:49 am
November 8, 2018
savemoresaveoften said
Just download some free malware cleanup software to try to clean it.
Is this how much you value your personal info and banking logins?
--------------------
Power off that computer and also have it disconnected from the Internet. Regardless of what you decide to do with it.
Depending on technical skills of a computer owner the right approach, in my opinion, would be:
1. To either wipe it clean thoroughly and reinstall everything from the scratch with possible option of replacing of HDD/SSD just to be on safe side;
or if computer owner is not a person with IT skills:
2. Buy new PC. Dispose infected computer.
One can get decent office type performance MiniPC for under $300.
Please write your comments in the forum.