Firefox states that the USPS.com Change of address form link is a dangerous site.
Firefox states that the USPS.com Change of address form link is a dangerous site. It says something like their security number is out of date. I overrode this. I noted it was a secure socket site and from the source code seemed to be from the USPS. It did ask me for a credit card number for a $1 charge. At that point I stopped and emailed the USPS.
Chosen solution
Thank you. I passed this information on to the USPS. I also drove over to my local Post Office and filled out a Change of address form using paper and ink. Sometimes it's just easier to move atoms rather than bits!
JH
Read this answer in context 👍 0All Replies (4)
When I visit https://moversguide.usps.com/icoa/icoa-main-flow.do?execution=e1s1 I do not get an error message.
Are you using any proxy software that might change how you connect to websites? We have had some threads about Bitdefender causing errors because it decrypts and scans the page, which means it can't present the website's true credentials. If you run Bitdefender, you can turn off this feature (copied from another thread; I haven't tested it myself):
BitDefender -> Privacy settings -> disable Scan SSL
The moversguide.usps.com server doesn't send a required intermediate certificate (COMODO High-Assurance Secure Server CA).
You can inspect the certificate chain via a site like this:
Firefox stores intermediate certificates that servers send automatically in the Certificate Manager for future usage. If you have never visited a website that did use that same intermediate certificate then Firefox hasn't saved it and you will get an untrusted error.
You can download and save the certificate via this web page and install the certificate via File > Open File of Firefox menu button > New Tab > Open File.
Do NOT check off any of the boxes as those are only required for root certificates and not for intermediate certificates.
You can contact the website via e-mail to inform them about the missing intermediate certificate and ask them to install it on their servers.
Modified by cor-el
Chosen Solution
Thank you. I passed this information on to the USPS. I also drove over to my local Post Office and filled out a Change of address form using paper and ink. Sometimes it's just easier to move atoms rather than bits!
JH
You're welcome.
Every now and then we come across such issues where a web server doesn't send a complete certificate chain.
In a lot of cases you won't notice this because Firefox stores all intermediate certificates that it encounters automatically and you wont get and error if one is already installed.
It is usually better to see if it is possible to install such a missing intermediate certificate yourself if it is a web site that you visit frequently rather than store a permanent exception.
If the www.networking4all.com site shows the content of the missing certificate then you can simply copy the base64 certificate text to a text file and import that file in the Certificate Manager.
- Tools > Options > Advanced : Encryption: Certificates - View Certificates