Log in

View Full Version : This forum and HTTPS


Mangix
23rd December 2012, 03:45
If you visit https://www.doom9.org and accept the certificate warning, you get this forum.

Is this URL pretty much abandoned? The certificate does not match the URL, is not trusted, and has expired on 8/8/12.

LoRd_MuldeR
23rd December 2012, 03:55
If you look at the certificate, you will notice that it's also a self-signed certificate!

So even if the certificate was still valid and was matching the domain name, your browser still wouldn't except it, because it has not been issued by a "trusted" CA that your browser knows about.

After all, there is not much reason to access Doom9 via HTTPS as a regular user.

And if you are the administrator, you can easily check the fingerprint of the certificate that you created/signed yourself ;)

filler56789
23rd December 2012, 17:40
And if you use Opera, it's easy to tell the browser to automatically approve the "invalid" certificates for the sites you trust. :)