This one came in via email from Philippe:
You’d think that a company with the page title “SSL Certificates from a Leading SSL Certificate Authority” could do a little better.
SSLFail
Michael submitted this SSL fail to us from the ICICI Bank Canada website. Another interesting thing about this website is that with javascript blocked, the default page won’t even load because they use a javascript redirect to send you to the main page (I suppose setting the DefaultDocuments directive (or rather the IIS equivalent) is too difficult).
Here’s the image:
A while back we posted a screenshot of the Rogers Webmail SSLFail. I decided to follow-up with Rogers to see if they were going to resolve the issue anytime soon. I contacted Rogers and asked if they were going to fix the issue, a couple of days later (July 11th) I received a canned response with no real information:
Dear Tyler,
Thank you for taking the time to write to us, we appreciate your use of
online customer service.In your recent email, you have informed us that you would like to know
when we will fix an issue with SSL warnings.Please accept our apologies for any difficulties that you may have
experienced while using Rogers services. Rogers strives for excellence
in customer service and we’re sorry that we did not meet your
expectations. Be assured that we take your concerns very seriously, and
appreciate the feedback that you have provided and this has been sent to
the appropriate group for their review. If you have any further
questions or requests please let us know.Thank you for contacting Rogers. For additional information please visit
our website at www.rogers.com. You are a valued customer and we thank
you for your business.For future email correspondence with respect to this e-mail, please
quote reference number XXXXXXXX
I have recieved no additional communication to let me know if they would be fixing this issue or not. I’m guessing they don’t take their SSL issues to be very serious as the issue still exists.
As a side note, in order to contact Rogers about a “website issue”, I had to provide an account number. The account 12345679 was accepted, but I couldn’t believe I needed an account number in order to contact them about there website. That’s ridiculous.
