Skip to content
Skip to main content

  • Home

Metasopht's profile
Metasopht

New Contributor

 • 

3 Messages

Monday, June 1st, 2020 11:00 PM

Expired Chinese SHA-1 Certificates on Cisco DPC3941B modems?

Just tried logging into my modem today using secure https instead of standard http, and Firefox tells me that the certificate not only expired in 2013, but was issued in Shanghai, and uses the severely outdated SHA-1 algorithm.  I've only had this modem for a few years.   The Cisco website says they're based in California, though Comcast claims they have Chinese offices as well.   So, anyone know why Comcast would be installing Chinese modems with expired certificates and SHA-1 encryption? If this weren't scary enough, because I'm running a fixed-IP server/router behind the modem, the installers recommended I set the modem firewall to the lowest setting, to allow everything to work properly.  Thanks.

  https://en.wikipedia.org/wiki/SHA-1

Question

 • 

Updated 

4 years ago

809

3

0

0

Comcast_JosephA

Official Employee

 • 

272 Messages

4 years ago

Hello, thanks for sharing. I know this activity is concerning. When I test our router interface, I am not getting this message or information. Your best bet is to call our Customer Security Assurance team at 1-888-565-4329 so we can dive into this security concern a little further. 

0

0

Metasopht

New Contributor

 • 

3 Messages

4 years ago

Thanks.  I suppose it wouldn't be as concerning if the router control web interface could only be accessed from "behind" the modem. However, I don't think that's the case, as otherwise there wouldn't be "remote access" controls (which I have turned off) available in the menu.

0

0

CC_Michelle

Official Employee

 • 

526 Messages

4 years ago

I can entirely understand where you are coming from and we want to ensure that your business is secure. You can also reach out through the website for our security assurance teams https://comca.st/3gNsUjn or you can reach out by phone during the Business Hours: 6:00am - 2:00am EST, 7 days a week Contact #: 1-888-565-4329. We would love to get to the bottom of your certificate concerns and ensure that we get you a secure connection. Our experts here will ensure that we do all that we can to secure all aspects of your business connection. 

0

0