The wildcard SSL cert used on the webcast portal has expired. Hopefully it gets renewed soon
If you're on chrome, you can click "Advanced" in the bottom left of the scary warning page, followed by clicking "https://portal.ldswebcast.org/#/startevent"
Unknown if this issue will only affect tech admins on the scheduling site or if it will affect meetinghouse playback - we shall find out at a stake conference Sunday :O
Privacy Error // portal.ldswebcast.org SSL expired 9/1
-
- New Member
- Posts: 12
- Joined: Mon Dec 05, 2011 12:14 pm
-
- Community Administrator
- Posts: 34421
- Joined: Sat Jan 20, 2007 2:53 pm
- Location: U.S.
Re: Privacy Error // portal.ldswebcast.org SSL expired 9/1
Ugh. I doubt if this is going to get fixed before sometime Tuesday.
Have you searched the Help Center? Try doing a Google search and adding "site:churchofjesuschrist.org/help" to the search criteria.
So we can better help you, please edit your Profile to include your general location.
So we can better help you, please edit your Profile to include your general location.
-
- Church Employee
- Posts: 3025
- Joined: Mon Feb 09, 2009 4:55 pm
- Location: Riverton, Utah
Re: Privacy Error // portal.ldswebcast.org SSL expired 9/1
I've nudged a couple of people to get this resolved.
-
- New Member
- Posts: 5
- Joined: Wed Oct 15, 2014 6:27 pm
Re: Privacy Error // portal.ldswebcast.org SSL expired 9/1
scgallafent, thank you for 'nudging' people to get this resolved.
This is more than just a bothersome issue. It is a significant security risk. Many userIDs/passwords (that would be used to set up webcasts) likely have access to systems that allow obtaining information of very confidential information, including home phone numbers and addresses of CEOs of Church owned and outside organizations! Not to mention every ecclesiastical leader throughout the world!!
These userIDs and passwords are not encrypted while SSL/TLS (https...) are not allowed. Yet the tier1 tech support at the Global Help Desk/Global Service Center state that the 'engineers tell us that this is not an issue to be worried about. Go ahead an use the system.'
This is more than just a bothersome issue. It is a significant security risk. Many userIDs/passwords (that would be used to set up webcasts) likely have access to systems that allow obtaining information of very confidential information, including home phone numbers and addresses of CEOs of Church owned and outside organizations! Not to mention every ecclesiastical leader throughout the world!!
These userIDs and passwords are not encrypted while SSL/TLS (https...) are not allowed. Yet the tier1 tech support at the Global Help Desk/Global Service Center state that the 'engineers tell us that this is not an issue to be worried about. Go ahead an use the system.'
-
- Senior Member
- Posts: 3907
- Joined: Mon Sep 24, 2007 9:17 am
- Location: Cumming, GA, USA
Re: Privacy Error // portal.ldswebcast.org SSL expired 9/1
An expired certificate doesn't mean that SSL is not used. With an expired certificate the traffic is still encrypted and is still secure as long as the server's private key has not been exposed.kevinf99 wrote:These userIDs and passwords are not encrypted while SSL/TLS (https...) are not allowed.
An expired certificate only means that the certificate authority hasn't rechecked that the certificate is still in possession of the certificate owner of record. With smaller organizations that could be a significant consideration. But with the church there isn't much chance that they have lost control of the domain. And there isn't anybody who recently had the domain that could be using their own expired certificate to pose as the church.
So as long as you make sure the certificate you are overriding is really for the right server, then traffic is still secure.
But they really should fix it soon. It's never good to train people to click past security warnings. If they get used to it, they're more likely to missing a real security risk whether on a church server or someone else's.
-
- Church Employee
- Posts: 155
- Joined: Mon Jun 09, 2014 2:41 pm
Re: Privacy Error // portal.ldswebcast.org SSL expired 9/1
This has been fixed as of 9/8/17
-
- New Member
- Posts: 1
- Joined: Sat Dec 03, 2016 9:27 am
- Location: Houston Texas
- Contact:
Re: Privacy Error // portal.ldswebcast.org SSL expired 9/1
OK, I understand what is being said, but apparently all the computers in our Family History Library are getting this TLS error. I am not there right now, but if I go there how do I correct the issue or can it be done remotely?
William V. (Bill) Skipper
6303 Taho Crossing Lane
Houston Texas, 77066
Mobile: 832-477-5011
IP Phone: 832-590-2222
6303 Taho Crossing Lane
Houston Texas, 77066
Mobile: 832-477-5011
IP Phone: 832-590-2222