Incorrectly showing "connection is not private" warning for a secure site

CyberArchon

Steps to reproduce:
A properly secured website is being reported as "Your connection is not private". This happend after clicking on a hyperlink from a URL of the same domain (i.e. not cross origin).

The issue went away after reloading.

This is the 2nd time I have run into this, haven't been able to reproduce deterministically. I believe it is different than https://orionfeedback.org/d/3334-ssl-websites-showing-insecure-ssl-status.

It may be related to https://orionfeedback.org/d/2817-this-connection-is-not-private-error-with-nextdns, because I use NextDNS as well. However, 1) I am not on iOS 2) Reload seems to fix it/behavior is not deterministic 3) Other browsers don't give me the same error. Therefore, reporting it separately

Expected behavior:
The error should not show up

Orion, OS version; hardware type:
Version 0.99.121-beta (WebKit 614.1.20)
M1 MacBook Pro (macOS Ventura 13.0 build 22A380)

Image/Video:

Vlad

CyberArchon Without steps to reproduce not much we can do. Why do you think it is differnt than https://orionfeedback.org/d/3334-ssl-websites-showing-insecure-ssl-status

CyberArchon

Vlad It is different because of the description from the linked post (emphasis mine): "Any SSL website is showing Insecure SSL Status if you repeatedly open new tabs of the same website."

This is not the case here. This is not happening as a function of repeatedly opening tabs of the same website -- the linked issue results in a behavior wherein the warning page doesn't display at all but the insecure padlock is present.

What I am describing in my issue is navigating to a secure website, and on the initial visit, getting a warning page

Vlad

CyberArchon Ok do you have reliable steps to reproduce it?

rosenrot

I do have the same issue when visiting www.20min.ch and clicking on a random story like https://www.20min.ch/story/mehrere-personen-von-lawine-begraben-mindestens-ein-toter-102541567456

I‘m on iOS.

jmanes

I too, have this issue. I have a Netgate firewall running pfBlockerNG. Basically DNS / IP filtering and blocking on the network level. Sadly this setup would be difficult for a dev to re-produce.

Some sites show a padlock icon that states insecure. Others like The Verge (https://theverge.com/) will randomly show me the "This connection is not private" page. When clicking "view certificate" I see that I am getting the cert from pfBlockerNG:

Curiously other browsers do not have this issue. I am not sure how Orion handles certs but I do believe network-level (or OS level) DNS filters / blockers are causing issues with Orion. Likely because they intercept traffic with their own middle-man cert.

EDIT: I am willing to work with a dev on this and contribute logs in any way possible.