3 ms·

This gives me yet another good reason to keep BECU[1] as my only bank for any non-trivial amount of money... it can be a pain if I need an ATM, but I can at lea

This gives me yet another good reason to keep BECU[1] as my only bank for any non-trivial amount of money... it can be a pain if I need an ATM, but I can at least trust that they will generally be on my side. [1] https://becu.org https://becu.org

deleted 12y ago
[deleted]
- jbhatab 12y ago
  There is a huge difference between the skills necessary to safely hold your money and setting up HTTPS. I bet you that there are a lot of fraudulent banks that are very good with https, but aren't to be trusted.
  - PeterisP 12y ago
    The difference is the same as the difference between the skills neccessary to be an ambassador and to wipe your bottom - one is trivial, but is a subset of the other. In order to safely run an internetbank, there are a thousand of small things that all must be done right. If they can't even set up (and test, and verify, and maintain) https, what makes you think that they can handle 100% of the much more complicated computing security issues without missing something?
    - shkkmo 12y ago
      > one is trivial, but is a subset of the other. Except you example is false. I see no reason a quadriplegic couldn't serve as an ambassador.
  - jacquesm 12y ago
    Those skills are converging over time.
Alupis 12y ago
Psst - the https link gives a cert error!
- sp332 12y ago
  Just add www https://www.becu.org/ https://www.becu.org/
koenigdavidmj 12y ago
I know from living in Seattle that they're a reputable credit union, but the fact that their home page gives me a certificate error is a bad pattern that trains users to ignore scary red messages. (The problem is that the cert is for www.becu.org , not becu.org .)
- kayfox 12y ago
  I think its because they never intended to be linked to without the www.
  - devicenull 12y ago
    That's not really an excuse. This is a pretty trivial thing to fix (update the cert, or force a redirect).
    - deleted 12y ago
      [deleted]
    - toast0 12y ago
      They do force a redirect on http://becu.org/ http://becu.org/, but they can't really force a redirect on https://becu.org/ https://becu.org/, because you would need to accept the mismatched name before you could get the redirect. Although, I'm surprised they don't have an alternate name, most of the CA's I've worked with recently automatically add the naked domain as an alternate name when you order a cert with www
reactivator 12y ago
A fix for the certificate error, https://www.becu.org https://www.becu.org
jld 12y ago
Why do you believe BECU would be any better?
- santaclaus 12y ago
  Presumably because BECU doesn't have a presence in Massachusetts and it would be harder for Mass. to get a levy on an out of state bank account? Op's tax lawyer in the article stated that "Chase Manhattan is not supposed to freeze an out-of-state account like this, and MA knows it. But MA does this because they know they can get away with it."

deleted 12y ago

[deleted]

jbhatab 12y ago
There is a huge difference between the skills necessary to safely hold your money and setting up HTTPS. I bet you that there are a lot of fraudulent banks that are very good with https, but aren't to be trusted.
- PeterisP 12y ago
  The difference is the same as the difference between the skills neccessary to be an ambassador and to wipe your bottom - one is trivial, but is a subset of the other. In order to safely run an internetbank, there are a thousand of small things that all must be done right. If they can't even set up (and test, and verify, and maintain) https, what makes you think that they can handle 100% of the much more complicated computing security issues without missing something?
  - shkkmo 12y ago
    > one is trivial, but is a subset of the other. Except you example is false. I see no reason a quadriplegic couldn't serve as an ambassador.
- jacquesm 12y ago
  Those skills are converging over time.

Alupis 12y ago

Psst - the https link gives a cert error!

sp332 12y ago
Just add www https://www.becu.org/ https://www.becu.org/

koenigdavidmj 12y ago

I know from living in Seattle that they're a reputable credit union, but the fact that their home page gives me a certificate error is a bad pattern that trains users to ignore scary red messages. (The problem is that the cert is for www.becu.org , not becu.org .)

kayfox 12y ago
I think its because they never intended to be linked to without the www.
- devicenull 12y ago
  That's not really an excuse. This is a pretty trivial thing to fix (update the cert, or force a redirect).
  - deleted 12y ago
    [deleted]
  - toast0 12y ago
    They do force a redirect on http://becu.org/ http://becu.org/, but they can't really force a redirect on https://becu.org/ https://becu.org/, because you would need to accept the mismatched name before you could get the redirect. Although, I'm surprised they don't have an alternate name, most of the CA's I've worked with recently automatically add the naked domain as an alternate name when you order a cert with www

reactivator 12y ago

A fix for the certificate error, https://www.becu.org https://www.becu.org

jld 12y ago

Why do you believe BECU would be any better?

santaclaus 12y ago
Presumably because BECU doesn't have a presence in Massachusetts and it would be harder for Mass. to get a levy on an out of state bank account? Op's tax lawyer in the article stated that "Chase Manhattan is not supposed to freeze an out-of-state account like this, and MA knows it. But MA does this because they know they can get away with it."