Another log-in on a website with weak cipher encryption...no padlock in Chrome!

polonus · 2015-04-26T20:23:24.000Z

Look here: https://www.wormly.com/test_ssl/h/www.tivo.com/i/208.73.180.110/p/443
And then here: https://www.tivo.com/tivo-mma/login/show.do
Comodo Certificate - no plublic audit info available!
Checked for unsecure content: Done. Total pages crawled: 33

Pages with unsecure content:
-https://www.tivo.com/discover/apps ?
-https://www.tivo.com/discover/features ?
-https://www.tivo.com/discover/mobile ?
-https://www.tivo.com/discover/tivo-anywhere ?
-https://www.tivo.com/find-store ?
-https://www.tivo.com/find-tv-shows/about-web-videos ?
-https://www.tivo.com/email-sub/subunsub/show.do ?

Why is such a site only alerted in the browser as coming without a padlock.

Domain Name: www.tivo.com
URL Tested: https://www.tivo.com/tivo-mma/login/show.do
Number of items downloaded on page: 0

*** NOTE ***: 0 items means no images were downloaded or existed on the page. It’s likely the URL you submitted was not a valid secure URL, or the page being tested only has text on it. Try copying and pasting the secure URL into a new browser window to make sure it displays as you’d expect.

Website returned an error (Possibly 404 not found or other webserver error). Details:
Certificate valid through: Aug 19 23:59:59 2017 GMT

Certificate Issuer: COMODO CA Limited
SSL Protocols Supported: TLSv1 TLSv1.1 TLSv1.2
SSL certficate is using SHA-1 algorithm that expires after 2015. You should re-issue your SSL certificate as SHA-2 to avoid padlock warning in Chrome.

polonus

polonus · 2015-04-26T22:07:40.000Z

Unsecure, checked at: https://shaaaaaaaaaaaaa.com/check/www.tivo.com
results: Dang.
www.tivo.com is using SHA-1.
Which is too bad, because SHA-1 is becoming dangerously weak. It’s time to upgrade to SHA-2.

polonus

Announcements