4 ms·

Anyone else getting "Connection is not secure" warning for this site, in Firefox? Hopefully they'll at least appreciate the irony in a blog post positioning th

by Touche 7y ago

Anyone else getting "Connection is not secure" warning for this site, in Firefox? Hopefully they'll at least appreciate the irony in a blog post positioning themselves as being about privacy.

sciurus 7y ago
No, I don't get any errors. Are you using any proxies, antivirus, etc that might interfere with your web traffic? https://observatory.mozilla.org/analyze/blog.mozilla.org#tls https://observatory.mozilla.org/analyze/blog.mozilla.org#tls
- Touche 7y ago
  It's now showing as secure in Firefox for me, but still insecure in Chrome. I wonder if something is going on with the certificate...
  - floatingatoll 7y ago
    If you inspect the insecure warning, is it a certificate issue or an in-page resources issue?
  - rnotaro 7y ago
    It's a Let's Encrypt Authority X3 certificate for blog.mozilla.org. The Certificate is valid from‎ August ‎31, ‎2019 2:31:34 PM to ‎June ‎2, ‎2019 2:31:34 PM. Potential issues with your system: -- MITM attack? -- Your antivirus is intercepting your browser traffic but doesn't have a valid certificate? -- Invalid System time? You could give us the error message you get instead of a generic comment on HN.
    - neogodless 7y ago
      For anyone that's confused like me, Period of Validity Begins On June 2, 2019 Ends on August 31, 2019
      - rnotaro 7y ago
        You're right and it's too late to edit it.
deleted 7y ago
[deleted]
zhte415 7y ago
I'm not. Using Firefox on Android. The website is https signed via Let's Encrypt.
LinuxBender 7y ago
Do you get the same fingerprint? openssl s_client -servername blog.mozilla.org -connect blog.mozilla.org:443 < /dev/null 2>/dev/null | openssl x509 -fingerprint -noout -in /dev/stdin | column -t SHA1 Fingerprint=D5:98:41:7E:DD:1C:10:E9:C5:CA:49:78:A1:C2:8F:C1:39:3F:2F:D5 Oh, here's the problem [1] scroll down a bit [1] - https://www.ssllabs.com/ssltest/analyze.html?d=blog.mozilla.org https://www.ssllabs.com/ssltest/analyze.html?d=blog.mozilla....

by Touche 7y ago

Anyone else getting "Connection is not secure" warning for this site, in Firefox? Hopefully they'll at least appreciate the irony in a blog post positioning themselves as being about privacy.

sciurus 7y ago

No, I don't get any errors. Are you using any proxies, antivirus, etc that might interfere with your web traffic? https://observatory.mozilla.org/analyze/blog.mozilla.org#tls https://observatory.mozilla.org/analyze/blog.mozilla.org#tls

Touche 7y ago
It's now showing as secure in Firefox for me, but still insecure in Chrome. I wonder if something is going on with the certificate...
- floatingatoll 7y ago
  If you inspect the insecure warning, is it a certificate issue or an in-page resources issue?
- rnotaro 7y ago
  It's a Let's Encrypt Authority X3 certificate for blog.mozilla.org. The Certificate is valid from‎ August ‎31, ‎2019 2:31:34 PM to ‎June ‎2, ‎2019 2:31:34 PM. Potential issues with your system: -- MITM attack? -- Your antivirus is intercepting your browser traffic but doesn't have a valid certificate? -- Invalid System time? You could give us the error message you get instead of a generic comment on HN.
  - neogodless 7y ago
    For anyone that's confused like me, Period of Validity Begins On June 2, 2019 Ends on August 31, 2019
    - rnotaro 7y ago
      You're right and it's too late to edit it.

deleted 7y ago

[deleted]

zhte415 7y ago

I'm not. Using Firefox on Android. The website is https signed via Let's Encrypt.

LinuxBender 7y ago

Do you get the same fingerprint? openssl s_client -servername blog.mozilla.org -connect blog.mozilla.org:443 < /dev/null 2>/dev/null | openssl x509 -fingerprint -noout -in /dev/stdin | column -t SHA1 Fingerprint=D5:98:41:7E:DD:1C:10:E9:C5:CA:49:78:A1:C2:8F:C1:39:3F:2F:D5 Oh, here's the problem [1] scroll down a bit [1] - https://www.ssllabs.com/ssltest/analyze.html?d=blog.mozilla.org https://www.ssllabs.com/ssltest/analyze.html?d=blog.mozilla....