I'm currently working as an expat for my company in a country where the Internet is notably untrustworthy. It made the headlines a few months ago for stealing facebook, twitter and gmail account passwords.
There was a revolution back in January and things are supposed to have improved.
And indeed they have, since when I connect to the Internet from home using one of the local provider's 3G HSPD connection things are much smoother (but still rough on the edges like systematic 403 messages sometimes => goto reboot the modem).
There's always a but...
When however I connect from the customer's premises then, among other weird things1, no SSL certificate is recognised (my company's sso, gmail...) !!!
Whenever I attempt to connect through https, my browser shows a warning page to give me a chance to manually validate the certificate.
www.google.com uses an invalid security certificate.
The certificate is not trusted because it is self-signed.
(Error code: sec_error_ca_cert_invalid)
1. What's going on here ?
2. Is there any risk in manually accepting these certificates ?
3. Is this also likely to be the reason why I can't access my company's Cisco VPN any more (I can ping the public VPN server address but the Cisco VPN client times out).
Note 1: The net admins have also barred access to facebook and whenever you connect to a page (e.g. news media) having a link to Facebook, the browser pops up a dialog box asking what you want to do with the
like.php. Probably wrong MIME type in the response.
NB: I have no Facebook account to start with.