Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.
Sign up to join this community
I'm getting a NET::ERR_CERT_AUTHORITY_INVALID for the following google sponsored website: https://viz.mediapipe.dev/
NET::ERR_CERT_AUTHORITY_INVALID
Subject: mediapipe.dev
Issuer: GTS CA 1O1
Expires on: 8 Mar 2021
I get this in Chrome only. In both Chromium and Firefox (on Ubuntu OS) the certificate is deemed valid and the page loads without any security related warnings. How would you go about figuring whether there's a real issue or security situation v.s. just a bug in Chrome?
The site is improperly setup. It only serves the leaf certificate, but does not serve the necessary chain certificate for the intermediate CA "GTS CA 1O1". See this SSLLabs report:
Browser usually try to work around such issues, but these workarounds will not always succeed. For example an existing Firefox profile will probably have cached the missing intermediate certificates and the workaround will work. With a fresh Firefox profile it will fail though:
I'm note sure why it fails with Chrome though but still succeeds with Chromium since I would expect both to apply the same kind of workarounds. Anyways, it should be fixed on the server side since it also fails with Python, curl etc.
