Somebody at Mango fat fingered their SSL...

shadow_man

Executive Member
Joined
May 27, 2005
Messages
6,200
Your connection is not private
Attackers might be trying to steal your information from flymango.co.za (for example, passwords, messages or credit cards). Learn more
NET::ERR_CERT_COMMON_NAME_INVALID

This server could not prove that it is flymango.co.za; its security certificate is from *.flymango.com. This may be caused by a misconfiguration or an attacker intercepting your connection.

The flymango.co.za is obviously broken as a result as the cert is for the flymango.com domain. Visiting flymango.com obviously works - but this is a stupid mistake to be making....

Mango get your act together.
 

infscrtyrisk

Expert Member
Joined
Nov 22, 2014
Messages
1,296
The same thing for https://www.flysaa.co.za/ site, it is using a cert for https://www.flysaa.com/ . I reported it over two years ago, still not fixed, although now if you accept the risk, it at least redirects to https://www.flysaa.com/ (previously it displayed the flysaa.com site using the flysaa.co.za URL).

An accurate reflection on the state of our SOEs, and was probably configured by the same doofus that did the Mango one.
 
Top