CyberCertPrepWeb App FundamentalsBrowser SecurityEASYFree question
A browser shows the error 'Your connection is not private' (NET::ERR_CERT_AUTHORITY_INVALID). What has occurred?
- A.The browser could not reach the DNS server, or the resolver returned an address that does not match the certificate for the requested hostname
- B.The server's TLS handshake used a protocol version older than TLS 1.0, or the cipher suite list offered by the server contained weak ciphers from the 1990s
- C.The user's browser clock is set far in the past, or the operating system certificate store was reset during the last update to the machine
- D.The server's TLS certificate was not issued by a CA trusted by the browser, or the certificate has expired or has an invalid hostname
Why D is correct
This error means TLS verification failed. Causes include: self-signed cert, expired cert, certificate issued for a different hostname, or a compromised/untrusted CA. A legitimate MITM proxy also triggers this. Users should not bypass this error for sensitive sites.
Know someone studying for Web App Fundamentals? Send them this one.