Mailing list - invalid certificate (https://pyra-handheld.com:1717/...)

Discussion in 'Site Feedback' started by the_marshal, Feb 21, 2019.

  1. the_marshal

    the_marshal Member

    Joined:
    Aug 27, 2010
    Messages:
    190
    Part of mailing list point to an URL with an invalid certificate. I know this is nothing new and has been discussed/mentioned before (1).

    Code:
    pyra-handheld.com:1717 uses an invalid security certificate. The certificate is only valid for rhea.dragonbox.de.
    Scenario:
    1. Go to https://www.pyra-handheld.com/pipermail/kernel/
    2. Click on "more information about this list" link
    3. Opens "https://pyra-handheld.com:1717/virtualmin-mailman/unauthenticated/listinfo.cgi/kernel"

    I've ran into this previously and ignored the warning (added a temporary exception in Firefox). This is obviously not very nice and no no longer easy to do on some browser. When HTTP Strict Transport Security (HSTS) is used on a website, Firefox no longer allows to add security exception.

    While this is not urgent, I think it should be fixed. I am unsure why a different port (1717) is used. It could also be that there is another way to access that page that works (and only the link needs to be updated).

    I am willing to help with the web server (...) config if needed. :)
     
    Tags:
  2. levi

    levi Still fresh, damnit!

    Joined:
    Oct 6, 2008
    Messages:
    10,391
    Location:
    Somewhere off the coast of the EU
    Yeah, it's been doing this ever since I first started reading that list.

    FWIW, rhea.dragonbox.de is ED's mailserver, probably amongst other roles.

    Worth raising this. I've always worked around it by going back to the monthly list using the browser back button, because once you've navigated to a months view the only way out going forward is via that busted link, so I had to go back. Not an ideal situation though.
     
    the_marshal likes this.

Share This Page

Loading...