We're calling on all EU-based Mozillians with iOS or iPadOS devices to help us monitor Apple’s new browser choice screens. Join the effort to hold Big Tech to account!

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Wo archive tread sia. Meɖekuku bia biabia yeye ne ehia kpeɖeŋu.

Secure Connection required

  • 3 ŋuɖoɖowo
  • 0 masɔmasɔ sia le wosi
  • 19 views
  • Nuɖoɖo mlɔetɔ cor-el

Nouman Nazim
Nouman Nazim
more options

A user of my website i.e. pricetoday.com.pk recently reported that he is getting following error:-

“ "Firefox detected a potential security threat and did not continue to pricetoday.com.pk because this website requires a secure connection."”

What could be the issue as I am using a valid SSL Certificate?

A user of my website i.e. [https://pricetoday.com.pk pricetoday.com.pk] recently reported that he is getting following error:- “ "Firefox detected a potential security threat and did not continue to pricetoday.com.pk because this website requires a secure connection."” What could be the issue as I am using a valid SSL Certificate?

All Replies (3)

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

I see a certificate for CN=example.com and this certificate is self-signed. Firefox also reports that the pricetoday.com.pk website is on the HSTS preload list and that is causing additional problems.

Nouman Nazim
Nouman Nazim Biabia la
more options

But it's working fine on my end. The certificate is issued by Amazon. I have scanned the website on DigiCert as well which shows that the certificate is totally fine and linked. Attaching relevant screenshots here. What could be the issue?

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

OK, I tested it following results shown by Qualys and disabled IPv6 and that makes it work properly and shows the Amazon certificate. 

2406:da1a:527:e000:5864:952d:d5b2:90bd
Certificate not valid for domain name

Disabling this by setting IPv6 network.dns.disableIPv6 = true makes it work properly for me, so you need to check the DNS response for IPv6.

cor-el trɔe