1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

My Hosting Company's Security Certificate Is "Not Trusted"?

Discussion in 'BlackHat Lounge' started by deeguy1, Sep 24, 2011.

  1. deeguy1

    deeguy1 Junior Member

    Joined:
    Mar 4, 2009
    Messages:
    197
    Likes Received:
    13
    I just bought hosting from an offshore source from Malaysia I believe. It's called Shinjiru which I learned about from here. When trying to access my domain's control panel, my browser gives me this warning:

    The site's security certificate is not trusted!

    You attempted to reach *******.net, but the server presented a certificate issued by an entity that is not trusted by your computer's operating system. This may mean that the server has generated its own security credentials, which Google Chrome cannot rely on for identity information, or an attacker may be trying to intercept your communications. You should not proceed, especially if you have never seen this warning before for this site.

    I looked at the certificate information from that URL and it says valid from 4/19/2009 to 4/29/2010

    Is this a big deal? Should I not proceed and cancel my account with them? Please help me out here =\
     
  2. Autumn

    Autumn Elite Member

    Joined:
    Nov 18, 2010
    Messages:
    2,197
    Likes Received:
    3,041
    Occupation:
    I figure out ways to make money online and then au
    Location:
    Spamville
    Basically you're with a lazy, dodgy host who can't be bothered renewing their SSL cert. Kind of goes with the territory with a shitty offshore host that you're going to use for whatever dodgy stuff you have planned, but it's a red flag that you should keep an eye out for other shitty or lazy behaviour on their part. If they can't be bothered renewing their SSL cert then they're probably pretty lax about updates, security etc.
     
    • Thanks Thanks x 2
  3. deeguy1

    deeguy1 Junior Member

    Joined:
    Mar 4, 2009
    Messages:
    197
    Likes Received:
    13
    Would you cancel your account or stay with these guys? They're prices beat everyone else and they seem to provide what I need
     
  4. Autumn

    Autumn Elite Member

    Joined:
    Nov 18, 2010
    Messages:
    2,197
    Likes Received:
    3,041
    Occupation:
    I figure out ways to make money online and then au
    Location:
    Spamville
    Well I have no knowledge of that particular host but it's a case of buyer beware.

    I assume you're using offshore because you want to do something dodgy, so if the host works ok then I'd just do it since you're already signed up. Offshore hosts don't tend to be very good about refunds.

    Keep everything else totally separate and only upload the bare minimum stuff to get your dodgy shit done. Keep regular backups and be ready to move to another host at the drop of a hat. Use unique passwords for everything in case you get hacked and also be aware that dodgy offshore hosts may deliberately fuck you if you are silly enough to upload something with, say, financial passwords, email passwords etc. When you're using offshore hosts (or really any hosts!) you just have to use your common sense really.
     
    • Thanks Thanks x 2
  5. ChanceLonestar

    ChanceLonestar Newbie

    Joined:
    Feb 23, 2009
    Messages:
    32
    Likes Received:
    2
    Lemme guess... host mantis? but at $10.75 a year it's hard to get better then that...
     
  6. deeguy1

    deeguy1 Junior Member

    Joined:
    Mar 4, 2009
    Messages:
    197
    Likes Received:
    13
    Nope this one is shinjiru, 15 bucks for a .net with private registration way overseas
     
  7. ChanceLonestar

    ChanceLonestar Newbie

    Joined:
    Feb 23, 2009
    Messages:
    32
    Likes Received:
    2
    That's pretty good, I wouldn't get too concerned unless they don't renew the certificate in a few weeks. It's not too big a deal unless you're doing eCommerce but I'd expect you'd get one for you domain if you were. As a precaution I suggest automating backups with say "Wordpress Backup to Dropbox" or whatever works for you. Backing up is always a good idea even with less then shady hosts.
     
    • Thanks Thanks x 1