ISP said "updated expired digital certificates" now no outgoing email - HELP
This is what the ISP said to me: "It looks like things were working up to the point where we updated our expired digital certificates this morning. You may need to accept the new certificate (which I had to do on my iPhone/iPad). All mail applications are different in how they treat SSL certificates. Please reference your application help files for information on how to import or accept a self signed digital certificate."
I have looked under "view certificates" and "validation", but I see nothing to change or do... So how do I accept this "new" certificate.
Thanks in advance!
craig
All Replies (2)
I forgot to add that the validation button does nothing and there is no revocation list available.
thanks
Ɖɔɖɔɖo si wotia
If your ISP is using self signed certificates ask them when they intend to become a professional shop. Self signed certificates are basically something that exists to allow for testing of setups without the expense of paying for certificates. This leaves a loophole for tight companies, usually mom and pop jobs, or law offices, that are simply to tight to use the correct chain of trust arrangement and actually pay for their certificates.
Correctly issued SSL certificates require no acceptance, as the issuer or someone further up the chain of trust is pre approved by Mozilla. It is extremely poor security to get users into the habit of accepting SSL certificates and they are not experts in such things and could easily appove a certificate that makes their communication plain text to the third party. You are actually better of with unsecured connections than you are with self signed ones. Then at least you know your vulnerable.
However, if you go to the Tools menu > options > Advanced > Certificates and turn of the verify option you might do better. They are probably also not set up for that as they self sign. Other than that view the certificates and delete whatever ones you already have for them.