Thread overview | |||||||
---|---|---|---|---|---|---|---|
|
March 31, 2017 dlang.org SSL certs | ||||
---|---|---|---|---|
| ||||
It's nice to see that all of the website's subdomains have SSL certificates. However, I noticed an inconsistency: dlang.org, forum.dlang.org, code.dlang.org, tour.dlang.org, wiki.dlang.org all serve the same content over both http and https. http://blog.dlang.org and https://blog.dlang.org, however, serve completely different content. The https version seems to serve the same page as https://digitalmars.com and, because the certificate is issued for digitalmars.com, browsers complain about it being invalid. If this is not intended behavior - maybe the same content should be served on both ports? Or maybe the subdomain should be removed in favor of https://dlang.org/blog? Also, I don't want to start a flame war, but I think all the http traffic need to be redirected to https. At least for the subdomains that require user login. |
April 05, 2017 Re: dlang.org SSL certs | ||||
---|---|---|---|---|
| ||||
Posted in reply to Ianis G. Vasilev | Ping.
Ali
On 03/31/2017 11:33 AM, Ianis G. Vasilev wrote:
> It's nice to see that all of the website's subdomains have SSL
> certificates. However, I noticed an inconsistency:
>
> dlang.org, forum.dlang.org, code.dlang.org, tour.dlang.org,
> wiki.dlang.org all serve the same content over both http and https.
>
> http://blog.dlang.org and https://blog.dlang.org, however, serve
> completely different content. The https version seems to serve the same
> page as https://digitalmars.com and, because the certificate is issued
> for digitalmars.com, browsers complain about it being invalid. If this
> is not intended behavior - maybe the same content should be served on
> both ports? Or maybe the subdomain should be removed in favor of
> https://dlang.org/blog?
>
> Also, I don't want to start a flame war, but I think all the http
> traffic need to be redirected to https. At least for the subdomains that
> require user login.
|
April 06, 2017 Re: dlang.org SSL certs | ||||
---|---|---|---|---|
| ||||
Posted in reply to Ali Çehreli | On Wednesday, 5 April 2017 at 20:57:18 UTC, Ali Çehreli wrote: > Ping. > > Ali > > On 03/31/2017 11:33 AM, Ianis G. Vasilev wrote: >> [...] I don't know exact details about the WordPress DLang blog, but Mike does. Please ping him to follow up on this issue: https://github.com/mdparker |
April 06, 2017 Re: dlang.org SSL certs | ||||
---|---|---|---|---|
| ||||
Posted in reply to Seb | On Thursday, 6 April 2017 at 11:30:05 UTC, Seb wrote:
> On Wednesday, 5 April 2017 at 20:57:18 UTC, Ali Çehreli wrote:
>> Ping.
>>
>> Ali
>>
>> On 03/31/2017 11:33 AM, Ianis G. Vasilev wrote:
>>> [...]
>
> I don't know exact details about the WordPress DLang blog, but Mike does. Please ping him to follow up on this issue:
> https://github.com/mdparker
I'll contact the server admin.
|
April 09, 2017 Re: dlang.org SSL certs | ||||
---|---|---|---|---|
| ||||
Posted in reply to Ianis G. Vasilev | On Friday, 31 March 2017 at 18:33:42 UTC, Ianis G. Vasilev wrote:
> dlang.org, forum.dlang.org, code.dlang.org, tour.dlang.org, wiki.dlang.org all serve the same content over both http and https.
>
> http://blog.dlang.org and https://blog.dlang.org
Looks like blog.dlang.org is simply missing a SNI entry (or support).
|
Copyright © 1999-2021 by the D Language Foundation