SOLVED

Default link to Network Secutiry group page from Office365 Security Score center SSL Cert fails

Deleted
Not applicable

Hi, 

 

I was following the link displayed in the Offic365 security score center. When accessing the link, a invalid SSL certificate warning get displayed. I think this, being a misconfiguration of an webserver which hosts a group on network security is a bit odd and maybe should be adjusted. 

 

The list I used

https://network.office.com/t5/Security-Privacy-Compliance/bd-p/security_privacy

 

Screenshot attached from SSLlabs about cert domain mismatch

 

Best regards

4 Replies

That's a CNAME redirect to the Lithium platform hosting the MTC, the link should be basic HTTP, not HTTPS. @Brandon Koeller @Anthony Smith (A.J.) FYI

best response confirmed by VI_Migration (Silver Contributor)
Solution

Hi Hans and Vasil,

 

Thanks for calling this out.  I found the same problem earlier this week and shared it with the team.  It should be on their backlog now.

I called this out a few times, back in 2016 no less, glad this is getting fixed! Nice one.

Hi Anthony,

 

thanks for the quick reply and heads-up! Good to hear its on the ToDo list!

 

Best regards

Hans

1 best response

Accepted Solutions
best response confirmed by VI_Migration (Silver Contributor)
Solution

Hi Hans and Vasil,

 

Thanks for calling this out.  I found the same problem earlier this week and shared it with the team.  It should be on their backlog now.

View solution in original post