.:SSLFail:.

Michael submitted this SSL fail to us from the ICICI Bank Canada website. Another interesting thing about this website is that with javascript blocked, the default page won’t even load because they use a javascript redirect to send you to the main page (I suppose setting the DefaultDocuments directive (or rather the IIS equivalent) is too difficult).

Here’s the image:

We had an interesting screen shot sent in today from Sheldon (his post on the subject).  It appears as though the SSL certificate on LinkedIn expired today and they waited until after the expiration to update their cert, leaving people with SSL errors temporarily. This doesn’t seem like a great way to foster user trust, I’d prefer my sites update their certificates early, rather than wait for them to expire. If this was a matter of they forgot the date and weren’t ready for the expiration, then I’m really concerned, that mistake should not happen… especially with a site I trust with so much of my personal information.