Starhub Giga

Bam25th

Master Member
Joined
Jul 22, 2020
Messages
4,809
Reaction score
3,257
Some problems with their root cert as it seems to be revoked or not updated

OCSP/CRL RevocationRevoked (via OCSP (cached))

but some browsers like vivadi (desktop) and android brave brower can load it
It feels dubious to bypass it with some browsers. Are these browsers too lax, or the usual browsers too stringent?

Regardless, the website is down for me for more than half a day already. Disappointing for a telco website……
 

sibeiTrolled

Senior Member
Joined
Oct 23, 2012
Messages
1,988
Reaction score
1,608
It feels dubious to bypass it with some browsers. Are these browsers too lax, or the usual browsers too stringent?

Regardless, the website is down for me for more than half a day already. Disappointing for a telco website……
Probably the way they check revocation or validity is slightly different
and likely something about soft fail (let you thru) vs hard fail (block you)
Also found an medium article on this

https://rambabusaravanan.medium.com...rome-and-edge-still-load-it-fine-3470de000528

Seem like it happen back in Aug
 

Bam25th

Master Member
Joined
Jul 22, 2020
Messages
4,809
Reaction score
3,257
Probably the way they check revocation or validity is slightly different
and likely something about soft fail (let you thru) vs hard fail (block you)
Also found an medium article on this

https://rambabusaravanan.medium.com...rome-and-edge-still-load-it-fine-3470de000528

Seem like it happen back in Aug
Giga’s one is a hard fail on safari. I can’t even accept the risk and proceed.

If it also happens so Aug, and for so many days, that makes it so much more worrying.

The medium article you shared mentioned chrome allows traffic through, so I tried using chrome too, but got hard blocked as well, with this error message:
www.giga.com.sg normally uses encryption to protect your information. When Chrome tried to connect to www.giga.com.sg this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be www.giga.com.sg or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Chrome stopped the connection before any data was exchanged.

You cannot visit www.giga.com.sg right now because its certificate has been revoked. Network errors and attacks are usually temporary, so this page will probably work later.”
 
Important Forum Advisory Note
This forum is moderated by volunteer moderators who will react only to members' feedback on posts. Moderators are not employees or representatives of HWZ Forums. Forum members and moderators are responsible for their own posts. Please refer to our Community Guidelines and Standards and Terms and Conditions for more information.
Top