Just tried to log-on to my HSBC Internet Banking tonight, using the saved bookmark I've always used. The home page loads fine, then when I click on the "Log on" button, I get a pop-up saying that the certificate isn't valid...



For obvious reasons, I've gone no further!

Using Safari 5.0.6 on Leopard 10.5.8 - the highest my old G4 Powerbook will go to, sadly. It's always worked fine up to now, and the certificate details say it doesn't expire until March 2013.

Anyone else getting this?

You bank with HSBC?

I used it this afternoon no probs. g5 leopard tenfourfox.

'host name mismatch' means the server's host name in DNS (by reverse lookup) is not one of the host name(s) listed on the SSL certificate. It could just be a misconfiguration on their part (i.e. they've installed the wrong cert on the server), or it could actually be someone whose nicked the cert and is trying to use a man-in-the-middle attack.

I think your caution was well-advised. I'd give it 24 hours if you can, see if it gets fixed. If not, I'd suspect skullduggery.

Not for much longer if they carry on this way!


I'm going away for a few days, which was why I just wanted to check my balances in the current account - but I'll have to wait until next week now. Not worth risking anything if there is a problem.

Don't they have phone banking?

Our just get your balance for a cash point.

One of our customers almost had their account cleared out today & they use first direct (hsbc).

Looks like the page had asked for their full password which they of course typed in, next thing they know the bank are on the phone confirming transfers etc.

It is one reason why Internet banking is slow to take off with some people. I rang my bank this morning to close accounts and change standing orders, though I have an Internet account.


Sent from my iPad using Tapatalk.