Closed Bug 1622643 Opened 6 years ago Closed 6 years ago

Received SSL_ERROR_BAD_CERT_DOMAIN facebook when browsing google

Categories

(Core :: Security: PSM, defect)

Product:
Core
Component:
Security: PSM
Version:
74 Branch
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED INCOMPLETE

People

(Reporter: thejaka.dev, Unassigned, NeedInfo)

Details

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0

Steps to reproduce:

I was searching on google in a private window. Usually, this works fine, and I was browsing fine.

Actual results:

At one point, I started getting SSL_ERROR_BAD_CERT_DOMAIN. I tried navigating back, and failing that, tried navigating to google afresh using my usual Google bookmark, each time getting SSL_ERROR_BAD_CERT_DOMAIN. After some time trying to reload, the normal behavior returned, and I was again able to load google. The exact message was as follows:

Websites prove their identity via certificates. Firefox does not trust this site because it uses a certificate that is not valid for www.google.com. The certificate is only valid for the following names: *.facebook.com, *.facebook.net, *.fb.com, *.fbcdn.net, *.fbsbx.com, *.messenger.com, facebook.com, fb.com, messenger.com, *.m.facebook.com, *.xx.fbcdn.net, *.xy.fbcdn.net, *.xz.fbcdn.net

Error code: SSL_ERROR_BAD_CERT_DOMAIN

View Certificate

Expected results:

I can't seriously believe google would mistakenly use an fb certificate, so the issue must be with either DNS, Firewall, or Firefox (Possibly something to do with tracking protection with social media trackers). This happened on at least two separate occasions. IIRC, on the previous occasion, I was using ESET Smart Security Premium on my machine, and now I'm using Norton 360, so the issue is probably not my own firewall. I can't however rule out a DNS issue. On the previous occasion, I can't exactly remember if I was using a Private Window or not, but it was an older version of Firefox.

Hi,

Unfortunately I was not able to reproduce this issue. Anyway I'm setting component to Firefox - Security for someone to take a look at this.

Component: Untriaged → Security

It's very hard to say what's going on but this feels like someone is bad at MitM your connection, so I doubt the issue is with Firefox. Did you try refreshing your setup as much as possible, i.e. running a fresh profile on Firefox and escalating up to using a different OS/computer, using a different network?

Component: Security → Security: PSM
Product: Firefox → Core

It's very hard for me to tell what's going on as well, as the issue only occurred 2-3 times so far with a gap of a couple months or more between occurrences. But both times I can remember, it was probably on the same connection (Copper/ADSL), though the OS/Browser installation might have been refreshed, not sure. Anyhow, I'll keep a lookout for repeat occurrences... I also have a Fibre line, so I'll monitor that as well... I mean to do a fresh installation of my OS when the new Windows 10 Update drops.

Next time this happens, can you attach the extra debugging output from clicking Advanced and then SSL_ERROR_BAD_CERT_DOMAIN?

Flags: needinfo?(thej82)

Sure, I'll try that next time, but not sure how long it may take for this to happen again...

I'll mark this as incomplete in the meantime.

Status: UNCONFIRMED → RESOLVED
Closed: 6 years ago
Resolution: --- → INCOMPLETE
You need to log in before you can comment on or make changes to this bug.