Question About Security Certificates

[ShelaghG]

My sis has on-line banking with the Halifax. Recently she hasn't looked at her account on-line because she keeps getting a message about their internet security certtificate being invalid or expired. She rang them and they said it wasn't anything to do with them and she should speak to her ISP. She did and they say it's the Halifax's problem. (Which seems pretty logical as the message says that it's the Halifax's cert which is invalid). She was worried that her account wasn't secure or that someone could view her on-line transactions. I think that as long as she gets the "https" at the top and the padlock at the bottom it's not really an issue, although I do think it's sloppy of the Halifax to let the thing expire!

Is it significant?

[silver]

Hi Shelagh,

I think it's probably safe, as you say its encrypted if it has https an the padlock, the cert do expire an it's not very good that its not upto date.

One way to be sure would be to email webmaster@<domain> an ask them to be sure

Sil