3 ms·

I thought it was a certificate issue? I am looking at robox.com and the issuing CA is GoDaddy...

by xyst 5y ago

jitl 5y ago
I’m just speculating. I didn’t do any in depth research - none of the articles or tweets by Roblox I saw offered anything more than “an internal issue”.
isuckatcoding 5y ago
Yeah but wouldn’t the impact be more widespread then?
mateo411 5y ago
Certificate issues don't take that long to resolve.
- dilyevsky 5y ago
  They do if your entire PKI infra is down too
  - duskwuff 5y ago
    A company's internal PKI infrastructure wouldn't be responsible for issuing a public-facing certificate. They literally can't sign those -- a real CA has to do it.
    - djbusby 5y ago
      Wait. You can sign your own. They are just not trusted by the wider world. Your devices have an OS provided set of trusted root-CA.
    - dilyevsky 5y ago
      You are of course correct but usually public and private would reuse some core components of the infra (eg still need to store signed key pair somewhere safe). I’m speculating here but given how long it’s been down some very core and very difficult to recover service must have failed. Security infra tends to have those properties
      - charcircuit 5y ago
        Downtime is expensive. You could just bypass your infra and manually get it working so that you can fix your infra while production is up instead of when it's down.
        crehn 5y ago
        That's in fact how most high-impact events should be handled: mitigate the issue with a potentially short-term solution, once things are back up find the root cause, fix the root cause, and perform a thorough analysis of events to ensure it won't happen again.
        dilyevsky 5y ago
        Depending on the level of automation that may not be possible. That’s like saying if factory line robot fails “you just bypass the line and manually weld those car bodies”
mig39 5y ago
robox or roblox?
- indigodaddy 5y ago
  I think he must have meant robox right? Cmon man get outta here.. :)
- xyst 5y ago
  Roblox.com

I thought it was a certificate issue? I am looking at robox.com and the issuing CA is GoDaddy...

by xyst 5y ago

I thought it was a certificate issue? I am looking at robox.com and the issuing CA is GoDaddy...

jitl 5y ago

I’m just speculating. I didn’t do any in depth research - none of the articles or tweets by Roblox I saw offered anything more than “an internal issue”.

isuckatcoding 5y ago

Yeah but wouldn’t the impact be more widespread then?

mateo411 5y ago

Certificate issues don't take that long to resolve.

dilyevsky 5y ago
They do if your entire PKI infra is down too
- duskwuff 5y ago
  A company's internal PKI infrastructure wouldn't be responsible for issuing a public-facing certificate. They literally can't sign those -- a real CA has to do it.
  - djbusby 5y ago
    Wait. You can sign your own. They are just not trusted by the wider world. Your devices have an OS provided set of trusted root-CA.
  - dilyevsky 5y ago
    You are of course correct but usually public and private would reuse some core components of the infra (eg still need to store signed key pair somewhere safe). I’m speculating here but given how long it’s been down some very core and very difficult to recover service must have failed. Security infra tends to have those properties
    - charcircuit 5y ago
      Downtime is expensive. You could just bypass your infra and manually get it working so that you can fix your infra while production is up instead of when it's down.
      - crehn 5y ago
        That's in fact how most high-impact events should be handled: mitigate the issue with a potentially short-term solution, once things are back up find the root cause, fix the root cause, and perform a thorough analysis of events to ensure it won't happen again.
      - dilyevsky 5y ago
        Depending on the level of automation that may not be possible. That’s like saying if factory line robot fails “you just bypass the line and manually weld those car bodies”

mig39 5y ago

robox or roblox?

indigodaddy 5y ago
I think he must have meant robox right? Cmon man get outta here.. :)
xyst 5y ago
Roblox.com