ABSA's internet banking ssl

[kissingmybbgoodbye]

Anybody lately checked Absa's SSL certificate on the internet banking login page.

It shows a lock with a yellow triangle.

If you inspect it the following shows

This site uses a weak security configuration (SHA-1 signatures), so your connection may not be private.

And then some more about a certificate being signed with a depreciated signature algorithm


Contacted Absa about it but F... All response.

Guess the site is still secure, but does not give the customer a lot of confidence. Bad move by a bank not to keep things upto date

 

[dread]

i noticed that as well ... and didnt want to continue ... but needed to pay rent .

But you are right , does not make a person feel comfortable especially in these times.

and with all the issues with their useless banking app , me loosing confidence in them, as i been having alot of other issues with them recently

 

[kissingmybbgoodbye]

i noticed that as well ... and didnt want to continue ... but needed to pay rent .

But you are right , does not make a person feel comfortable especially in these times.

and with all the issues with their useless banking app , me loosing confidence in them, as i been having alot of other issues with them recently

Had the same problem had to pay something, contacted their call center (they are a useless bunch of pr.cks, just telling me all is right), Emailed their fraud dept and no response. I wonder if something happens how this will affect their case in court if there has to be one about online fraud and leaked credentials etc).

Obviously they don't care

 

[Napalm2880]

This was talked about some months ago already.

Ah, here's the link:

http://www.naschenweng.info/2015/05/05/ssl-implementation-poor-south-african-financial-institutions/

 

[biometrics]

http://mybroadband.co.za/news/secur...works-online-shops-ssl-security-rankings.html

April 2014

 

[MagicDude4Eva]

I contacted all the companies mentioned in my blog mid April about it and not a single one could be bothered to answer or fix. Same applies to quite a few serious security vulnerabilities - uh well, half their IT staff should be fired over such blatant ignorance. Last week's pick was a credit-bureau leaking customer information (indexed SQL dump on Google).

 

[kissingmybbgoodbye]

Fired of a couple of emails to Absa, see if I get any reaction at all. If not maybe mybb can write a nice article to maybe wake them up a bit.