This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Some google (or https generally maybe) websites freak out when accessed if "warning" enabled

Our web filtering is running in transparent mode with URL filtering only enabled. I wanted to put a warning on people accessing streaming media and in the main it works, however some sites, YouTube specifically the PITA in question at the moment, we get the following message in Firefox and no actual Sophos warning screen..

Your connection is not secure

The owner of youtube.com has configured their web site improperly. To protect your information from being stolen, Firefox has not connected to this web site.

This site uses HTTP Strict Transport Security (HSTS) to specify that Firefox only connect to it securely. As a result, it is not possible to add an exception for this certificate."

youtube.com uses an invalid security certificate. The certificate is not trusted because the issuer certificate is unknown. The server might not be sending the appropriate intermediate certificates. An additional root certificate may need to be imported. Error code: SEC_ERROR_UNKNOWN_ISSUER

Likewise in Chrome we get:

Your connection is not private

Attackers might be trying to steal your information from youtube.com (for example, passwords, messages or credit cards)

NET::ERR_CERT_INVALID

 

If i go to www.spotify.com the warning works perfectly and then the site proceeds to the spotify homepage which is a https connection successfully.. 

 

I'm really not sure where to start to resolve this issue, can someone point me in the right direction please? 



This thread was automatically locked due to age.