Dangerous site ...

[rslade]

OK, so those who have been paying attention will know that I frequently post links to CNN's "lite," text only Website.  I like to avoid the ads and pop-up videos, and keep the bandwidth low.

So I send Gloria a link to a story, using her GMail account, and GMail, as she tries to click on the link, warns her that this site is suspicious.

OK, CNN has been somewhat derelict in keeping the https://lite.cnn.io/en site going recently.  But suspicious?

Maybe Google is just suspicious of any site that doesn't have a ton of ads on it?

[CISOScott]

Or could it be due to a poorly maintained https certificate? I know my work internet browser will block any https website whose security certificate is not 100% legitimate.

I am suspicious of the goog as well.......

[rslade]

> CISOScott (Community Champion) posted a new reply in Industry News on 12-10-2019

> Or could it be due to a poorly maintained https certificate?

Given the site's recent history of uptime, this is entirely possible ...

====================== (quote inserted randomly by Pegasus Mailer)
rslade@vcn.bc.ca slade@victoria.tc.ca rslade@computercrime.org
The program with a lengthy sign-on procedure is most urgently
required the moment you sign out of it.
- https://twitter.com/SecurityHumor/status/444458051261571072
victoria.tc.ca/techrev/rms.htm http://twitter.com/rslade
http://blogs.securiteam.com/index.php/archives/author/p1/
https://is.gd/RotlWB

[denbesten]

---

@rslade, @CISOScott wrote:
> Or could it be due to a poorly maintained https certificate?

---

My favorite two SSL checkers give it good grades.  Ssllabs does show that one of the intermediate certificates is missing, but that is only a minor infraction that browsers are pretty good at repairing.  

https://www.ssllabs.com/ssltest/analyze.html?d=lite.cnn.io&latest

https://www.sslshopper.com/ssl-checker.html#hostname=lite.cnn.io

Perhaps it is Rob that Google considers suspicious :-).

[denbesten]

---

---

And, the other half of the equation is that the web site does not appear to be suspicious to any of the malware checkers, notably including Google's own.

https://www.virustotal.com/gui/url/8504cf1bd43d2e32aa2146d8a04471679dcab7cf4652db512f14f2a551902b56/...

https://transparencyreport.google.com/safe-browsing/search?url=lite.cnn.io&hl=en

Of course, these checks are point-in-time, so there could have been something suspicious at the time Gloria clicked that was cleared by the time I checked.

@rslade, @CISOScott 

[rslade]

> denbesten (Community Champion) posted a new reply in Industry News on 12-11-2019

>   Perhaps it is
> Rob that Google considers suspicious :-).

You mean *other* than suspecting that I am an AI experiment gone horribly
wrong?

====================== (quote inserted randomly by Pegasus Mailer)
rslade@vcn.bc.ca slade@victoria.tc.ca rslade@computercrime.org
Newspapers are unable, seemingly, to discriminate between a
bicycle accident and the collapse of civilisation.
- George Bernard Shaw
victoria.tc.ca/techrev/rms.htm http://twitter.com/rslade
http://blogs.securiteam.com/index.php/archives/author/p1/
https://is.gd/RotlWB