Should I pass the link if the browser writes that your connection is not private
Browsers / / December 19, 2019
Sometimes the browser blocks the site under the pretext that it might be fraudulent. We investigated together with a specialist in Internet security, whether it is possible to visit the site, if the connection is not protected by it.
Surely you at least once met with a warning that states that "the attackers may try to steal your passwords, messages and credit card numbers." It was with these words scare Chrome users when it considers that those on the verge of trouble. Flashy red castle further pumps.
In this case, if the request for additional information, you will be shown a few concise sentences:
"The computer's operating system does not trust its security certificate. The server may be configured incorrectly or someone trying to intercept your data. "
Drily somehow, I want details. For clarification, we asked the professionals in the field of Internet security. On Layfhakera questions are answered Denis Makrushin, anti-virus expert "Kaspersky Lab".
What is the Chrome implies insecure connection?
Unprotected is any connection between the user's computer and the web server on which the data is transmitted in the clear. In this case, the attacker has the possibility to intercept the data, which may include valuable information such as login and password for this account in social networks, online banking data systems, personal photos (including photo papers) and so Further.
Protected is a compound in which all data is encrypted, so the interception attacker can not read them (or decryption would take too long). When any browser detects that the transition to the site data can be transmitted, and the connection is not encrypted, it will automatically alert the user about it. The site is not blocked. The user is still able to go to him, in spite of the warning.
What is SSL-certified security, which refers to the browser?
One of the technologies, which provides a protected data transfer between the user's browser and the server is just the SSL (Secure Socket Layer). This protocol, which is used to establish HTTPS-connection - the same connection that the browser considers reliable. At the same time, it displays in its address bar green padlock.
To ensure such a connection on the server side, to which the user is connected, it must be installed SSL-certificate. This is a unique signature server, which is a confirmation of the fact that the server is actually legitimate, and not owned by the attacker. The user's browser uses this certificate to verify the legitimacy of the server and the subsequent installation of a secure connection.
Can I switch on blocked links bypassing the warning?
By default, Chrome and most other browsers do not prohibit the user to click on links that have a questionable server certificate. On the one hand, this is done for the reason that not all owners have the option to buy servers SSL-certificate in special organization (Certificate Authority), and they are forced to use a self-signed certificates. Such certificates can be alerted built-in protection system browser, but this fact does not mean that the site is fraudulent.
But if the user thinks that he goes to the website of the bank, while receiving this warning browser, it is a chance to question the legitimacy of the site. It is better to suspend further work with him, not to mention some online financial transactions.
It is recommended to make sure that the user actually works over a secure connection, and not, for example, through a public Wi-Fi network, and the device is not infected with trojan financial.
Thanks to Denis Makrushin and "Kaspersky Lab" for clarification. It became clear that the problem with the security certificate is not so terrible. You can move, but it is not necessary to login, to leave any data, much less pay, if you are informed of the possible threat.