FlyerTalk Forums - View Single Post - Avast Alert on Delta.com
View Single Post
Old May 16, 2017 | 1:35 pm
  #11  
SDQBound
500k
30 Countries Visited
All eyes on you!
15 Years on Site
 
Join Date: Sep 2006
Location: Santo Domingo, Dom. Rep. / Washington, DC
Programs: AA PPro/DL PLT, PPass, Marriott / Hilton Gold, JetBlue Mosaic, Hertz Presidents Circle, Amex Plat
Posts: 4,789
Originally Posted by mother-

A revoked certificate has NOTHING to do with a certificate being expired or having the wrong name on it and is not something you should ever click through.

When you don't know what you're talking about please don't give people advice.



I think you mean either Delta IT realized they had an old compromised certificate on that site or the hackers/police/intelligence agency are no longer doing a man-in-the-middle attack on you.

Never click through such a message! (Should I say that again!?)
I'm sure I know what I'm talking about... Otherwise I would not be managing SSL certificates and a PKI infrastructure for a worldwide organization (plus a few InfoSec certifications).

If you read my message carefully, I mentioned the word false positive. Avast and other "internet security" tools often misinterpret a certificate mismatch or any other kind of error and have a generic "revoked certificate" message...

So please read carefully before offending others.

Delta could have a bad IT reputation, but trust me, there is a very small chance that they would revoke a certificate in a production server without installing a valid one first.
SDQBound is offline