Aller au contenu

Photo

EA Origin website security issue?


  • Veuillez vous connecter pour répondre
2 réponses à ce sujet

#1
Fortack

Fortack
  • Members
  • 2 609 messages
Hi,

I've reinstalled my PC and was about to download Origin from the EA site so I can play ME3 MP again, but when I click on the 'download Origin button' I get a security warning (using multiple browsers). This is the Firefox warning:

This Connection is Untrusted

You have asked Firefox to connect securely to download.dm.origin.com, but we can't confirm that your connection is secure. Normally, when you try to connect securely, sites will present trusted identification to prove that you are going to the right place. However, this site's identity can't be verified.

What Should I Do?
         
If you usually connect to this site without problems, this error could mean that someone is trying to impersonate the site, and you shouldn't continue.

Technical Details

download.dm.origin.com uses an invalid security certificate.

The certificate is only valid for the following names:
asset1.origin.com , asset2.origin.com , cdn.config.stage.easports.com , cdn.config.easports.com , cdn.content.easports.com , cdn.content.ping.test.easports.ea.com , cdn.content.stage.easports.com , cdn.content.stage2.easports.com , cdn.content.stage3.easports.com , cdn.easa.ping.test.easports.ea.com , cdn.easa.stage.easports.com , cdn.easa.stage2.easports.com , cdn.easa.www.easports.com , cdn.easf.stage.easports.com , cdn.easf.stage2.easports.com , cdn.easf.www.easports.com , cdn.ping.test.easports.ea.com , cdn.ping.test.easportsfootball.ea.com , cdn.stage.eafootballworld.com , cdn.stage.easports.com , cdn.stage.easportsfootball.com , cdn.stage.easportsworld.com , cdn.stage2.eafootballworld.com , cdn.stage2.easports.com , cdn.stage2.easportsfootball.com , cdn.stage2.easportsworld.com , cdn.stage3.eafootballworld.com , cdn.stage3.easports.com , cdn.stage3.easportsfootball.com , cdn.stage3.easportsworld.com , cdn.www.eafootballworld.com , cdn.www.easports.com , cdn.www.easportsfootball.com , cdn.www.easportsworld.com , fonts.ea.com , www.origin.com , origin.com

(Error code: ssl_error_bad_cert_domain)

If you understand what's going on, you can tell Firefox to start trusting this site's identification. Even if you trust the site, this error could mean that someone is tampering with your connection.

Don't add an exception unless you know there's a good reason why this site doesn't use trusted identification.


Does someone know what is wrong with the Origin website?

#2
.458

.458
  • Members
  • 2 113 messages
You get that error if SSL is used and the certificate is not verifiable. Kind of a way to avoid someone intercepting the site and putting their own fake site up. It's rather unlikely someone took over origin.com (and your local system is not looking at something fake like origin.com.cn) so it really does not matter and the only issue is that origin failed to renew their cert. Cert renewal costs money and takes time. Not sure what origin's tech support contact is, but you could tell them their cert expired for download.dm.origin.com. All of that is a long-winded way of saying it's ok to use it and it isn't a security issue in a case like this.

#3
Fortack

Fortack
  • Members
  • 2 609 messages
Thanks for the reply .458 :) I figured it must be something like that, but I still think it's odd for a company such as EA to be sloppy with certificates - I can't recall ever seeing that message. I posted the issue at the Origin tech forum so maybe someone from EA will fix the issue.

I've done a thorough search and found my ME3 discs and used those to install Origin and updated it. So my problem is solved :D