{"id":3339,"date":"2017-01-02T10:43:34","date_gmt":"2017-01-02T15:43:34","guid":{"rendered":"https:\/\/www.thesslstore.com\/blog\/?p=3339"},"modified":"2018-08-13T03:09:54","modified_gmt":"2018-08-13T07:09:54","slug":"time-warner-ssl-expires","status":"publish","type":"post","link":"https:\/\/www.thesslstore.com\/blog\/time-warner-ssl-expires\/","title":{"rendered":"More Bad Security Advice From Companies Who Should Know Better"},"content":{"rendered":"

Time Warner suggests turning off SSL after its mail certificate expires.<\/h2>\n

Over the weekend, the SSL certificate securing Time Warner Cable\u2019s email server expired. This caused widespread outages for users, who couldn\u2019t access their email.<\/p>\n

Shortly after the problem started, users began posting on Time Warner\u2019s forum complaining that they could not access their email – popular apps\u2019 like Mail for iOS were refusing connections entirely.<\/p>\n

Time Warner support suggested a fix: \u201cgoing into your email settings and disabling SSL will stop the pop-up message and re-enable the webmail fetch.\u201d The company was\u00a0giving the same advice on its Twitter account<\/a>.<\/p>\n

[su_pullquote]It is shocking to see a major ISP condoning such a solution, which would leave users with an unsecured connection to their email.[\/su_pullquote]<\/p>\n

It is shocking to see a major ISP condoning such a solution, which would leave users with an unsecured connection to their email. That would make it incredibly easy for those emails to be read and intercepted by malicious third-parties. This is downright dangerous due to the sensitive information sent in emails and the well-known threats of un-encrypted communication.<\/p>\n

Users who take this advice will be happy their email works again, unlikely to remember they need to check back in and see if it’s okay to turn SSL back on. This could leave users without a secure connection to their email for years.<\/p>\n

In its post, Time Warner did not explain what SSL was or the security risks of turning it off. Time Warner support also suggested users use the webmail site, which had working SSL, as a secondary solution.<\/p>\n

\"Time
Time Warner’s expired email certificate.<\/figcaption><\/figure>\n

The certificate expired right before 7 p.m. EST Dec. 30. It took nearly 24 hours for the issue to be resolved. In that time, more than 4,000 people viewed threads about the problem and could have heeded the bad advice of disabling SSL<\/p>\n

In 2017, making sure your SSL certificate is renewed ahead of time should be on any company or organization’s checklist of basic security procedures, next to \u201cremove default admin login.\u201d<\/p>\n

What makes this situation even more egregious is that it comes from an ISP. Given the amount of resources and IT expertise an ISP has at its disposal, there is simply no excuse to allow a certificate to expire, or to give such poor advice. This is like your car manufacturer telling you to just ignore the check engine light.<\/p>\n

Friday night during a holiday weekend is probably the worst time to have to fix an outage. Is it disruptive? Sure. Did it mean someone had to drive back to the office? Maybe. But that\u2019s what an organization that actually takes security seriously would do.<\/p>\n

Note: Thanks to my father, a long-time Time Warner customer, who pointed me to the issue.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"

Time Warner suggests turning off SSL after its mail certificate expires. Over the weekend, the SSL certificate securing Time Warner Cable\u2019s email server expired. This caused widespread outages for users,…<\/p>\n","protected":false},"author":2,"featured_media":3341,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":"","tve_updated_post":"","tve_custom_css":"","tve_user_custom_css":"","tve_globals":{},"tcb2_ready":0,"tcb_editor_enabled":0,"tve_landing_page":"","_tve_header":"","_tve_footer":""},"categories":[17],"tags":[315,317,299,316,136,314],"class_list":["post-3339","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-industry-lowdown","tag-certificate-expired","tag-disabling-ssl","tag-email","tag-mail-server","tag-ssl","tag-time-warner","post-with-tags"],"views":11674,"jetpack_featured_media_url":"https:\/\/www.thesslstore.com\/blog\/wp-content\/uploads\/2017\/01\/iStock-621388222.jpg","_links":{"self":[{"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/posts\/3339","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/comments?post=3339"}],"version-history":[{"count":0,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/posts\/3339\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/media\/3341"}],"wp:attachment":[{"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/media?parent=3339"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/categories?post=3339"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.thesslstore.com\/blog\/wp-json\/wp\/v2\/tags?post=3339"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}