SmarteePantz
Level 1 (4 points)
Safari

Q: Disable "Safari can't verify the identity of website..." dialog in Safari

My parents occasionally get a dialog saying "Safari can't verify the identity of website..." in Safari.  Since it's impractical to teach them the subtleties of certificate management, and have them apply that logic consistently, I want Safari to always reject those websites without popping up the dialog.  Is there a way to do that?

 

Notes

  • I want to automatically reject pages that would show this dialog, not automatically accept them. (There is an easy solution for the accepting case).
  • I'm OK with them not being allowed to go to some legitimate sites that are having temporary certificate issues.  The downside of them selecting "Continue" to a bank-spoofing site is far higher.
  • They are using Retina 5K iMacs with OS X El Capitan and Safari 9.1.3.

 

Thanks

Posted on Sep 4, 2016 8:29 AM

Close
SmarteePantz

Q: Disable "Safari can't verify the identity of website..." dialog in Safari

  • All replies
  • Helpful answers

  • by tygb ,

    tygb tygb Sep 4, 2016 8:46 AM in response to SmarteePantz
    Level 1 (131 points)
    Sep 4, 2016 8:46 AM in response to SmarteePantz

    Hello !

               SmarteePantz

    Your respected parents are using the Retina 5K i MAC with EL - Capitan, that is so good. And if any pop up comes Safari can't verify the identity of website ... in safari that sometimes makes uneasy.

    And if you really wanna reject the page .

    I searched an article for it : OS X El Capitan: If your certificate isn’t being accepted

     

    So , have a lovely day ahead .

                                                      Thanks .

  • by SmarteePantz,

    SmarteePantz SmarteePantz Sep 4, 2016 8:55 AM in response to tygb
    Level 1 (4 points)
    Safari
    Sep 4, 2016 8:55 AM in response to tygb

    My question actually asked something different.  That page describes how to add a certificate to the computer's certificate store so Safari will accept it as valid.  I want Safari to automatically reject any site that does not have a valid certificate (using only the certificates that come with OS X).  But thanks for responding.

  • by tygb ,

    tygb tygb Sep 4, 2016 9:10 AM in response to SmarteePantz
    Level 1 (131 points)
    Sep 4, 2016 9:10 AM in response to SmarteePantz

    I sincerely apologize for it , i found another article for validation of certificates : Keychain Access: Determine if a certificate is valid

  • by SmarteePantz,

    SmarteePantz SmarteePantz Sep 4, 2016 9:18 AM in response to tygb
    Level 1 (4 points)
    Safari
    Sep 4, 2016 9:18 AM in response to tygb

    My question actually asked something different.  That page describes how to use the Keychain Access app to determine if a certificate is valid.  I want Safari to automatically reject any site that does not have a valid certificate (using only the certificates that come with OS X).  But thanks for responding.

  • by VikingOSX,

    VikingOSX VikingOSX Sep 4, 2016 9:30 AM in response to SmarteePantz
    Level 7 (20,564 points)
    Mac OS X
    Sep 4, 2016 9:30 AM in response to SmarteePantz

    Apple is big on security, and that Safari website identity verification change that you wish to make would require internal logic changes to the application source. How does Firefox 48.0.1 or later respond to one of these websites?

  • by SmarteePantz,

    SmarteePantz SmarteePantz Sep 4, 2016 9:35 AM in response to VikingOSX
    Level 1 (4 points)
    Safari
    Sep 4, 2016 9:35 AM in response to VikingOSX

    My question actually asked something different.  Instead of changing identity verification, I want Safari to simply reject any site that does not have a valid certificate (using only the certificates that come with OS X).  So, instead of bringing up the dialog box asking whether to continue, just don't continue and show a dialog box without any choice.  Do you know if there is a setting for that?

  • by VikingOSX,

    VikingOSX VikingOSX Sep 4, 2016 9:50 AM in response to SmarteePantz
    Level 7 (20,564 points)
    Mac OS X
    Sep 4, 2016 9:50 AM in response to SmarteePantz

    In Safari Preferences : Notifications, see if the website that is popping the certificate dialog is listed there, and remove it. Although you might disable all Safari notifications in the System Preferences : Notification panel — security related dialogs may override those settings.

     

    In Safari Preferences : General, enable the developer menu, and then press option+command+E to clear the browser cache. Disable the Developer menu afterwards.  You might want to clear all website data once, and then reassess if the certificate dialog appears again.

     

    Otherwise, I know of no other approach to achieve your goal, and what I said about this being an internal Safari program logic issue removes it from user fixes.