Hace poco recibí el siguiente mensaje de error de hotmail.com (o live.com) después de haber iniciado sesión con el navegador Chrome, y consistentemente con diferentes cuentas y computadoras (independientemente del modo 2FA o de incógnito):
Your connection is not private
Attackers might be trying to steal your information from bay181.mail.live.com (for example,
passwords, messages or credit cards). NET::ERR_CERT_COMMON_NAME_INVALID
Subject: bing.com
Issuer: Microsoft IT SSL SHA2
Expires on: 3 Apr 2017
Current date: 14 Jun 2015
PEM encoded chain: -----BEGIN CERTIFICATE-----
.
.
.
.
-----END CERTIFICATE-----
bay181.mail.live.com normally uses encryption to protect your information. When Chrome tried to
connect to bay181.mail.live.com this time, the website sent back unusual and incorrect credentials.
Either an attacker is trying to pretend to be bay181.mail.live.com, or a Wi-Fi sign-in screen has
interrupted the connection. Your information is still secure because Chrome stopped the connection
before any data was exchanged.
You cannot visit bay181.mail.live.com right now because the website uses HSTS.
Network errors and attacks are usually temporary, so this page will probably work later.
Si bien entiendo que esto es un resultado de la implementación de HSTS y que la redirección de http a https podría haber sido "insegura", deseo comprender la causa, así como cualquier amenaza real y potencial que pueda haber enfrentado. .