Connection error when access bananarepublic credit card site |
||||
Issue descriptionLoad bananarepublic.gap.com in Chrome on an Android device. Scroll to the bottom, tap on "+" for "BANANA REPUBLIC CREDIT CARD". Click on "MANAGE MY ACCOUNT". This opens a new tab and shows "This site can't be reached". This repro on Chrome Dev and Beta, not Chrome stable. See attached for the net capture.
,
Jan 13 2017
SSL_CIPHER_FALLBACK is a red herring, but this is indeed SSL-related and already known. The site is buggy (RSA-PSS intolerance) and needs to be fixed (they haven't take updates for over a year now). The next release of Firefox is expected to break them too. One company covers basically all the broken hosts, including this one, and we've been in contact with them since November. As of two days ago, they're supposed to have the fix deployed "late this week, early next week at the latest". Though given it's Friday, I suspect it'll more be early next week. Their thread was scheduled to be pinged again on Monday.
,
Jan 13 2017
Thanks for the details.
,
Jan 21 2017
Update: the company that owns this host (and other affected ones) has begun rolling out the update. Most of the hosts I'd probed for them as problematic have been fixed, but not all. The one in this bug report, www3.onlinecreditcenter6.com, has not yet been fixed, but presumably that's coming.
,
Jan 23 2017
The host appears to be fixed now. Let me know if you're still seeing problems. |
||||
►
Sign in to add a comment |
||||
Comment 1 by cbentzel@chromium.org
, Jan 13 2017Status: Assigned (was: Available)