Mailing list - invalid certificate (https://pyra-handheld.com:1717/...)


the_marshal

Member
Joined
Aug 27, 2010
Messages
191
Part of mailing list point to an URL with an invalid certificate. I know this is nothing new and has been discussed/mentioned before (1).

Code:
pyra-handheld.com:1717 uses an invalid security certificate. The certificate is only valid for rhea.dragonbox.de.

Scenario:
1. Go to https://www.pyra-handheld.com/pipermail/kernel/
2. Click on "more information about this list" link
3. Opens "https://pyra-handheld.com:1717/virtualmin-mailman/unauthenticated/listinfo.cgi/kernel"

I've ran into this previously and ignored the warning (added a temporary exception in Firefox). This is obviously not very nice and no no longer easy to do on some browser. When HTTP Strict Transport Security (HSTS) is used on a website, Firefox no longer allows to add security exception.

While this is not urgent, I think it should be fixed. I am unsure why a different port (1717) is used. It could also be that there is another way to access that page that works (and only the link needs to be updated).

I am willing to help with the web server (...) config if needed. :)
 

levi

Still fresh, damnit!
Joined
Oct 6, 2008
Messages
14,037
Location
Somewhere off the coast of the EU
Yeah, it's been doing this ever since I first started reading that list.

FWIW, rhea.dragonbox.de is ED's mailserver, probably amongst other roles.

Worth raising this. I've always worked around it by going back to the monthly list using the browser back button, because once you've navigated to a months view the only way out going forward is via that busted link, so I had to go back. Not an ideal situation though.
 
Top