Is it normal that msi.com isn't https everywhere?

[LOST TALE]

https://www.msi.com/Motherboard/support/B450-A-PRO/

[Oshino Shinobu]

I mean, the link you've provided is HTTPS. It's not too unusual for there to be some subdomains that haven't had a certificate applied. 

 

[AdvocateOfNyx]

4 minutes ago, Oshino Shinobu said:

I mean, the link you've provided is HTTPS. It's not too unusual for there to be some subdomains that haven't had a certificate applied. 

 

I went to the same link and got a "not secure" message on Edge.

 

[Oshino Shinobu]

3 minutes ago, AdvocateOfNyx said:

I went to the same link and got a "not secure" message on Edge.

 

-snip-

That's interesting, I just tried in Edge and also get not secure there, but fine in Chrome.

 

The cert is valid, Edge just isn't fully happy with the Key Usage and Basic Constraints fields. It's still https, but it's not flagged as "fully" secure.

[LOST TALE]

22 minutes ago, Oshino Shinobu said:

That's interesting, I just tried in Edge and also get not secure there, but fine in Chrome.

 

The cert is valid, Edge just isn't fully happy with the Key Usage and Basic Constraints fields. It's still https, but it's not flagged as "fully" secure.

so how is it not fully secure if cert is valid?

[Oshino Shinobu]

3 minutes ago, LOST TALE said:

so how is it not fully secure if cert is valid?

Don't know on that. Edge itself is saying the cert is valid and it seems to be at least partially secure. If you look at the details of the cert, there's two fields with warnings on them. What it is that Edge doesn't like precisely, I'm not sure. Quick search for the details of the message (about attackers being able to see images) suggests it to do with mixed content on the site. 

 

Nothing to worry about really, you're not entering any sensitive data on the site (I assume)