1

I am having a strange issue reported from a client:

enter image description here

This browser doesn't show HTTPS secured and accredited connection, although my site has HTTPS. Normally, on other browsers they show.

For example:

[Company Security Certificate] www.blahblahblah

I don't know which browser this is. I have tried to reproduce with all the latest versions of the following:

  • Edge
  • IE11
  • Chrome
  • Firefox Quantum
  • Firefox Developer Edition
  • Opera
  • SeaMonkey

However, all of them show HTTPS. This browser looks like a Windows platform because it has Windows outlook, so I can cross Safari off of the list.

Does anyone have a slight chance to recognize this browser or offer any explanation?

Improve this question
4
  • Does your site not serve port 80 at all?
    – Arminius
    Apr 19 '18 at 13:40
  • I don't recognize the browser, but https is only the default for your site if you use HSTS preloading (with certain browsers). So unless you're redirecting to the https:// version of the site, this would be normal when they type your web page in without the protocol. The weird look of the browser could be a theme/customization. Chrome supports this, for example, though it still doesn't quite look like Chrome.
    – nbering
    Apr 19 '18 at 14:00
  • 5
    To get a definitive answer, ask the client who submitted the report.
    – Xander
    Apr 19 '18 at 14:29
  • Do they have a proxy between you and them that does not use https?
    – jwilleke
    Apr 21 '18 at 9:24
1

Have them go to an https url. So make sure they aren't just going to www.yoursite.com, but click the link https://www.yoursite.com:443

If that doesn't show, try disabling http or closing port 80 on your server in an effort to trouble shoot and confirm it actually https. Have them use wireshark to take a capture and look for tls handshake. If that doesn't work there is a likelihood that your customer has been Man in the Middle attacked with something called ssl stripping. That would be very bad news.

This could be the signs of a cyber attack, so I recommend investigating quickly.

Improve this answer
0

The browser does not seem identifiable to me from the screenshot. However to make sure your site always uses HTTPS, you should:

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.