Go Back  FlyerTalk Forums > Miles&Points > Airlines and Mileage Programs > Air Canada | Aeroplan
Reload this Page >

Warning: aircanada.ca is not a safe website

Community
Wiki Posts
Search

Warning: aircanada.ca is not a safe website

Thread Tools
 
Search this Thread
 
Old Jan 20, 2017, 11:33 am
  #1  
Original Poster
 
Join Date: Jul 2013
Location: MLL / AC Cafe
Programs: It's hard to get status when the website won't let me book flights.
Posts: 5,706
Warning: aircanada.ca is not a safe website

..... yes I know it's because they are using the wrong SSL certificate for .ca but that does technically make it insecure to use or purchase on.

Attached Images  
Sean Peever is offline  
Old Jan 20, 2017, 12:01 pm
  #2  
Original Member
 
Join Date: May 1998
Location: Vancouver, Canada
Posts: 6,222
And?

.
KenHamer is offline  
Old Jan 20, 2017, 12:35 pm
  #3  
 
Join Date: Feb 2009
Location: YYC
Programs: BA bronze, Aeroplan peon
Posts: 4,746
I have been getting a whole bunch of those on various websites this morning using Firefox. It refused to connect to google.ca for example.
Jagboi is offline  
Old Jan 20, 2017, 12:36 pm
  #4  
 
Join Date: Jan 2014
Programs: AC 35K, Hilton Diamond
Posts: 232
Has been happening for at least a few days. I thought .ca redirected to .com previously and avoided this issue?
gregster is offline  
Old Jan 20, 2017, 12:52 pm
  #5  
Original Poster
 
Join Date: Jul 2013
Location: MLL / AC Cafe
Programs: It's hard to get status when the website won't let me book flights.
Posts: 5,706
Originally Posted by gregster
Has been happening for at least a few days. I thought .ca redirected to .com previously and avoided this issue?
After they forced the new website, the certificate they got doesn't include .ca as a valid URL. The company that did the website just basically made a huge beginner mistake.
Sean Peever is offline  
Old Jan 20, 2017, 1:18 pm
  #6  
Formerly known as newbie elite
 
Join Date: Feb 2002
Location: YUL
Programs: IHG Diamond Ambassador, Accor Platinum, AC50K
Posts: 2,927
Originally Posted by Sean Peever
After they forced the new website, the certificate they got doesn't include .ca as a valid URL. The company that did the website just basically made a huge beginner mistake.
Par for the course for our friends at IBM GS.

EDIT: Apparently not, must be a spin-off Thanks for correcting me jaysona

Last edited by Admiral Ackbar; Jan 20, 2017 at 6:42 pm
Admiral Ackbar is offline  
Old Jan 20, 2017, 1:21 pm
  #7  
FlyerTalk Evangelist
 
Join Date: Feb 2004
Location: YVR
Programs: AC SE 2MM; UA MP Premier Silver; Marriott Bonvoy LT Titanium Elite; Radisson; Avis PC
Posts: 35,255
So, do we laugh or cry...
yyznomad is offline  
Old Jan 20, 2017, 1:22 pm
  #8  
 
Join Date: Aug 2010
Location: Why? Why? Zed! / Why? You? Elle! / Gee! Are You!
Programs: Irrelevant
Posts: 3,543
Originally Posted by gregster
Has been happening for at least a few days. I thought .ca redirected to .com previously and avoided this issue?
The connection is first made with ac.ca webserver at which point the webserver issues a redirect that tells the browser to go to aircanada.com. The issue is that the ssl certificate for the aircanada.ca webserver has aircanada.com listed as the FQDN (fully qualified domain name) so any web browser that does rudimentary certificate checks will always return an error - as it should.

What I'm more curious about is why there are two different servers?
I wonder what's really hosted on the aircanada.ca webserver..........

Originally Posted by Sean Peever
After they forced the new website, the certificate they got doesn't include .ca as a valid URL. The company that did the website just basically made a huge beginner mistake.
Ya, really n00b mistake on the part of Amadeus, I mean how hard is it to add subjectAltName = DNS: www.aircanada.ca, DNS: www.aircanada.com as part of the CSR?

Originally Posted by Admiral Ackbar
Par for the course for our friends at IBM GS.
Not IBM GS in this case.

Last edited by jaysona; Jan 23, 2017 at 8:56 pm Reason: Clarrifications
jaysona is offline  
Old Jan 23, 2017, 8:52 pm
  #9  
 
Join Date: Aug 2010
Location: Why? Why? Zed! / Why? You? Elle! / Gee! Are You!
Programs: Irrelevant
Posts: 3,543
So I decided to do a little further digging on ssl certificates used for the aircanada.com and aircanada.ca websites.

While the results may look bad on the surface, they're not all that bad, but today there really is no reason to have certificates issued in this manner.

aircanada.ca full report



aircanada.com full report.



Time for IBM and Amadeus to get current.

Last edited by jaysona; Jan 23, 2017 at 10:30 pm
jaysona is offline  
Old Jan 23, 2017, 10:24 pm
  #10  
 
Join Date: Dec 2014
Location: Providence RI
Programs: American Exec Plat, Hyatt Refugeeist, Marriot Gold, Air Canada Cattle Class, Korean Air Morning Plat
Posts: 988
There will soon be a new $35.00 fee for using a secure website........

www.aircanadasecure.ca
The smallest state is offline  
Old Jan 28, 2017, 8:52 am
  #11  
Original Poster
 
Join Date: Jul 2013
Location: MLL / AC Cafe
Programs: It's hard to get status when the website won't let me book flights.
Posts: 5,706
So it's now been 8 days...... I am confident people from AC have seen this...... and something that literally takes 5 minutes to fix (and maybe 3 hours to get the cert) that makes their website compleatly unsafe to buy flights on hasn't been fixed..........

I mean this makes me feel better about the IKK things, but wow! I would have thought that something that stops people from visiting the website or buying tickets would be a higher priority.
Sean Peever is offline  
Old Jan 28, 2017, 2:09 pm
  #12  
 
Join Date: Jan 2003
Location: AC SE, SPG Lifetime Plat, ACMM
Posts: 3,535
I cannot cancel my latitude ticket. I get the same technical problems message and am asked to call the res system. Wow, the new site is really great...very little can be done without calling the res line! Another enhancement!
ac777 is offline  
Old Jan 28, 2017, 2:31 pm
  #13  
 
Join Date: Feb 2016
Location: YYZ
Programs: AmEx, Aeroplan, Mariott
Posts: 13
Originally Posted by The smallest state
There will soon be a new $35.00 fee for using a secure website........
www.aircanadasecure.ca
Shhhh! Don't give them ideas!
laboremus is offline  
Old Mar 5, 2017, 6:30 am
  #14  
Original Poster
 
Join Date: Jul 2013
Location: MLL / AC Cafe
Programs: It's hard to get status when the website won't let me book flights.
Posts: 5,706
Sooooooooo almost 2 months later and you still can't access www.AirCanada.ca

Seriously this is a 10 minute fix and has no doubt cost them 7 figures by now.
Sean Peever is offline  
Old Mar 7, 2017, 5:18 pm
  #15  
 
Join Date: Aug 2010
Location: Why? Why? Zed! / Why? You? Elle! / Gee! Are You!
Programs: Irrelevant
Posts: 3,543
Originally Posted by Sean Peever
Sooooooooo almost 2 months later and you still can't access www.AirCanada.ca

Seriously this is a 10 minute fix and has no doubt cost them 7 figures by now.
Not quite true. you can access www.aircanada.ca, but the web browser will still show a certificate error.



Agreed that this is really a n00b issue, but I guess AC expects all their revenue traffic to come from the .com domain and not the .ca domain. That's the only reason I can fathom for not spending the few minutes it would take to fix this issue.
jaysona is offline  


Contact Us - Manage Preferences - Archive - Advertising - Cookie Policy - Privacy Statement - Terms of Service -

This site is owned, operated, and maintained by MH Sub I, LLC dba Internet Brands. Copyright © 2024 MH Sub I, LLC dba Internet Brands. All rights reserved. Designated trademarks are the property of their respective owners.