Feb 14 2018 07:26 AM
Feb 14 2018 07:26 AM
Hi,
I was following the link displayed in the Offic365 security score center. When accessing the link, a invalid SSL certificate warning get displayed. I think this, being a misconfiguration of an webserver which hosts a group on network security is a bit odd and maybe should be adjusted.
The list I used
https://network.office.com/t5/Security-Privacy-Compliance/bd-p/security_privacy
Screenshot attached from SSLlabs about cert domain mismatch
Best regards
Feb 14 2018 10:22 AM
That's a CNAME redirect to the Lithium platform hosting the MTC, the link should be basic HTTP, not HTTPS. @Brandon Koeller @Anthony Smith (A.J.) FYI
Feb 14 2018 10:32 AM
SolutionHi Hans and Vasil,
Thanks for calling this out. I found the same problem earlier this week and shared it with the team. It should be on their backlog now.
Feb 14 2018 12:28 PM
I called this out a few times, back in 2016 no less, glad this is getting fixed! Nice one.
Feb 14 2018 02:56 PM
Hi Anthony,
thanks for the quick reply and heads-up! Good to hear its on the ToDo list!
Best regards
Hans