Advertisements

Web Security Warning: Say What?

Having turned on my old Kindle Fire’s “security warnings” just to see what happens, I’m confronted by pop-ups like this on a regular basis:

Web Security Warning

Web Security Warning

People who know what they’re talking about tell me there’s no way for ordinary civilians, such as I, to evaluate the validity of the “credentials” described by that pop-up. In this case, the credential apparently comes from DigiCert, which ought to be trust-able, and was issued to cmcore.com, an actual IBM subsidiary that apparently does Web analytics.

It works fine through my desktop browsers. The Kindle, however, can’t even find digicert.com, so the problem must be an Amazon thing.

The only response that makes sense is to continue loading: gizmodo.com might have cat pictures!

I should just turn off the warnings and be done with it…

Advertisements
  1. #1 by madbodger on 2016-01-02 - 11:43

    Browsers use a list of “root” authorities they’ll trust (either built-in or provided by the OS or environment). It could be that your kindle is resource-constrained and has a small list because of that, or (more likely in my mind), amazon has strong ideas about who you should be able to do business with, and subtly enforces it by manipulating the trust list to only include their partners. For most browsers, you can manipulate the list yourself.

    • #2 by Ed on 2016-01-02 - 15:07

      amazon has strong ideas about who you should be able to do business with

      Or, as is sometimes the case, a sufficiently advanced incompetence is indistinguishable from malice…

  2. #3 by eriklscott on 2016-01-02 - 14:05

    Curious – is this the Silk browser, or something else? I could imagine strange, Amazon-only brain damage with Silk.

    • #4 by Ed on 2016-01-02 - 15:16

      It’s the stock Silk browser, which is AFAICT, the only Web browser available for the Fire without sideloading. It “fails” the same way even after routing the page rendering through Amazon’s servers, so the security check must happen locally.