SSL: Site Is Still Secure.

As of today, you're probably noticing a message like "This site may not be secure," or "The site's security certificate has expired" when you log in. Don't worry, everything is fine and the site is still secure. Nobody has tried to hack us.

This is happening because our commercial SSL certificate expired. We renewed it, but haven't received the new one yet. We expect to have this resolved soon, but in the meantime the old certificate still encrypts your connection properly.

Corporate Greed Rant wrote:

Just FYI, that's the same message you will get from any site that creates their own certificate.

Every SSL connection requires a unique key. Paying for the encryption key just means that another company (in our case GlobalSign) provided the key, and that message normally means that a site created their own key for free, instead of buying it...which is perfectly fine because it works exactly the same way. In our case it means that our commercial key has expired, which is also perfectly fine because it still works the same way.

All browsers have a list of companies that they trust to provide encryption keys, but that doesn't mean an unknown key is any less safe...it's basically just a way to force sites to pay for their keys, because users get scared when they see the big red sign that says "this site may not be secure".