Message boards :
Number crunching :
S@h_BETA 'faked'? I can't log-in with Firefox
Message board moderation
Author | Message |
---|---|
![]() Send message Joined: 6 Apr 07 Posts: 7105 Credit: 147,663,825 RAC: 5 ![]() |
Hello community! I wanted to log-in in my S@h_BETA account. I go to the website: 'http://setiweb.ssl.berkeley.edu/beta' ..click on 'Your account'.. ..the URL in the browser change to 'https://..' ..and my Firefox browser say: Dieser Verbindung wird nicht vertraut It's like the website is 'faked'. You see similar things there? Thanks! ![]() |
KB7RZF ![]() Send message Joined: 15 Aug 99 Posts: 9549 Credit: 3,308,926 RAC: 2 ![]() |
I got a warning as well when I clicked on my account, but it let me long in just fine. ![]() |
![]() Send message Joined: 6 Apr 07 Posts: 7105 Credit: 147,663,825 RAC: 5 ![]() |
I got a warning as well when I clicked on my account, but it let me long in just fine. You use the Internet Explorer? IIRC, the URL in the browser don't change to 'https://..'. You see also the 's'? Firefox say it could be a fake and I should 'go away'.. ;-) ![]() |
![]() ![]() Send message Joined: 16 Mar 00 Posts: 634 Credit: 7,246,513 RAC: 9 ![]() |
I am able to reach the "Your account" page on SETI Beta using MS Internet Explorer, and the url starts with http. However, when I tried to navigate there with Google Chrome, I received this security warning: The site's security certificate is not trusted! You attempted to reach setiweb.ssl.berkeley.edu, but the server presented a certificate issued by an entity that is not trusted by your computer's operating system. This may mean that the server has generated its own security credentials, which Google Chrome cannot rely on for identity information, or an attacker may be trying to intercept your communications. You should not proceed, especially if you have never seen this warning before for this site. And the url changed to https. (Since I had never been there before via Google Chrome, I was being directed to the login page.) ![]() |
![]() Send message Joined: 6 Apr 07 Posts: 7105 Credit: 147,663,825 RAC: 5 ![]() |
For ~ one month or something (the last time I logged-in there) I could log-in with Firefox. In the meantime maybe someone changed there something? Because normally (in past) the URL don't change to 'https://..'. ![]() |
![]() ![]() Send message Joined: 21 Apr 04 Posts: 3252 Credit: 31,903,643 RAC: 0 ![]() |
SETI Bêta Main Page Also be able to log-in, normally. But, only Bêta Forums, are UP, all other servers are Disabled or Not Running, so no work is generated. AP tasks can only come from SETI@Home ;-) ![]() |
JohnDK ![]() ![]() ![]() Send message Joined: 28 May 00 Posts: 1222 Credit: 451,243,443 RAC: 1,127 ![]() ![]() |
I am able to reach the "Your account" page on SETI Beta using MS Internet Explorer, and the url starts with http. Not sure if you mean there was no warning when using IE, which version do you use? Using IE8 I did get the warning, I clicked anyway and got to the login screen. I don't think there anything bad/fake going on, I thing either the certificate has run out or Seti have change some URL stuff so the certificate isn't valid anymore. |
Claggy Send message Joined: 5 Jul 99 Posts: 4654 Credit: 47,537,079 RAC: 4 ![]() |
SETI Bêta Main Page I can also log in O.K with IE and Firefox, Don't trust what the Server Status page says, it hasn't reflected reality for at least 9 months, the rest of the project is up, and to prove it here's some fresh work i've just received: All tasks for computer 45274 Claggy |
Josef W. Segur Send message Joined: 30 Oct 99 Posts: 4504 Credit: 1,414,761 RAC: 0 ![]() |
S@H uses self-signed certificates. The browser should allow you to view the certificate and see that, then if you trust the staff you accept the certificate. It is definitely proper for a browser to get the user's judgement for such cases which are not chained back to one of the big certificate issuers. Joe |
![]() ![]() Send message Joined: 14 May 99 Posts: 4438 Credit: 55,006,323 RAC: 0 ![]() |
|
![]() Send message Joined: 6 Apr 07 Posts: 7105 Credit: 147,663,825 RAC: 5 ![]() |
I never use again the Internet Explorer.. ;-) I use only Firefox.. :-) The 'problem' is, that I never got a notification in Firefox that I enter a 'https' (security, encrypted) area, if I log(ged)-in at S@h or S@h_B. The 'http' stay/ed all the time. The strange is, for some hours, that the browser say, I will enter a 'https' area after clicking on 'Your account' at S@h_B. This was never before. I don't want to look to EMails or make homebanking or something similar.. S@h and S@h_B was never a 'https' area. Maybe an admin changed there something? Or, what's going on with my browser? EDIT: BTW. Now I see also only the 'http' in the browser here in the forum.. EDIT#2: You see there 'https'? ![]() |
KB7RZF ![]() Send message Joined: 15 Aug 99 Posts: 9549 Credit: 3,308,926 RAC: 2 ![]() |
I got a warning as well when I clicked on my account, but it let me long in just fine. No, I only use Firefox. Once the certificate is accepted, you don't get the warning again, or at least I didn't. ![]() |
![]() ![]() Send message Joined: 16 May 99 Posts: 10436 Credit: 110,373,059 RAC: 54 ![]() ![]() |
I see the Http when I use safari or IE8, when Im on the mesaage boards. ![]() Old James |
![]() ![]() Send message Joined: 21 Apr 04 Posts: 3252 Credit: 31,903,643 RAC: 0 ![]() |
|
![]() ![]() Send message Joined: 16 Mar 00 Posts: 634 Credit: 7,246,513 RAC: 9 ![]() |
Not sure if you mean there was no warning when using IE, which version do you use? Using IE8 I did get the warning, I clicked anyway and got to the login screen. My default browser is IE8, and I'm automatically logged in to my SETI Beta account using that browser. I'm sure that if I logged out and tried to log in again using IE8, I'd get the warning. The warning appeared when I used Google Chrome for the first time, and was directed to the login page. (Incidentally, this warning did not appear when I logged into my SETI Main account page for the first time using Chrome.) Since I agree that there isn't a problem with the site, I proceeded with the SETI Beta login anyway. I was not afforded an opportunity to view the security certificate, but once logged in, I remained logged in and was able to access the "Your account" page without any further warnings. ![]() |
Sirius B ![]() ![]() Send message Joined: 26 Dec 00 Posts: 24929 Credit: 3,081,182 RAC: 7 ![]() |
Just logged into S@H Beta using IE with no problems. No https & logged out & back in, still no problem. |
![]() Send message Joined: 31 May 99 Posts: 19 Credit: 8,523,679 RAC: 1 ![]() |
The login process uses https protocol. It presents a certificate to you browser so your browser knows it is the website it is suposed to be. The name for which the certificate is issued (setibase.ssl.berkeley.edu) as present on the current certificate does not match the exact address (http://setiweb.ssl.berkeley.edu/beta/) off the website. Also the certificate is a so called self signed certificate. i.e. a certificate created by berkeley itself, as opposed by a certificate provided by a certificate authority (i.e. verisign and the likes). Modern browsers warn you that this is not in compliance whit how certificats are suposed to be used. You can check the certificate by looking at its detail, check the address in your browser and if you think everything is OK then add an exception allowing your browser to accept this certificate. |
![]() ![]() Send message Joined: 16 Mar 00 Posts: 634 Credit: 7,246,513 RAC: 9 ![]() |
Just logged into S@H Beta using IE with no problems. No https & logged out & back in, still no problem. I did the same - logged out and in - and IE8 did indeed give a security warning. The login page url is secure/encrypted: https://setiweb.ssl.berkeley.edu/beta/login_form.php?next_url=home.php. Which version of IE are you using? ![]() |
Sirius B ![]() ![]() Send message Joined: 26 Dec 00 Posts: 24929 Credit: 3,081,182 RAC: 7 ![]() |
Win 7 & Version 8. Still not getting any warning. logs in ok. |
Eric Korpela ![]() Send message Joined: 3 Apr 99 Posts: 1383 Credit: 54,506,847 RAC: 60 ![]() ![]() |
David was doing some testing of using https to secure the login pages. He didn't realize that we have a self signed certificate which shows up as a warning in most browsers. He's stopped the testing until we by a certificate signed by a certification authority (CA). @SETIEric@qoto.org (Mastodon) ![]() |
©2025 University of California
SETI@home and Astropulse are funded by grants from the National Science Foundation, NASA, and donations from SETI@home volunteers. AstroPulse is funded in part by the NSF through grant AST-0307956.