TLS on Introversion pages is currently broken

The place to hang out and talk about totally anything general.
greese
level0
Posts: 2
Joined: Sat Feb 22, 2014 12:46 pm

TLS on Introversion pages is currently broken

Postby greese » Sat Mar 22, 2014 12:44 pm

My Browser reports the following error on any Introversion related page:

Code: Select all

forums.introversion.co.uk:443 uses an invalid security certificate.

The certificate is only valid for the following names:
  secure.introversion.co.uk, test-www.introversion.co.uk, test-secure.introversion.co.uk, www.introversion.co.uk, introversion.co.uk 
The certificate expired on 01.02.2014 21:51. The current time is 22.03.2014 12:39.


Maybe you guys should refresh your certificate and include the forum as well.
At the same time you should update the available cyphers to something more secure than rc4. TLS 1.2 won't hurt

(https://www.ssllabs.com/ssltest/analyze ... 23.154.131 )
User avatar
NeatNit
level5
level5
Posts: 2929
Joined: Mon Jan 28, 2008 2:41 pm
Location: Israel
Contact:

Re: TLS on Introversion pages is currently broken

Postby NeatNit » Sat Mar 22, 2014 12:48 pm

Are you trying to use HTTPS? Well... don't.
microchip08
level5
level5
Posts: 1187
Joined: Fri Aug 31, 2007 4:37 pm
Contact:

Re: TLS on Introversion pages is currently broken

Postby microchip08 » Sat Mar 22, 2014 1:28 pm

NeatNit wrote:Are you trying to use HTTPS? Well... don't.


But my password!
greese
level0
Posts: 2
Joined: Sat Feb 22, 2014 12:46 pm

Re: TLS on Introversion pages is currently broken

Postby greese » Sun Mar 30, 2014 11:01 am

NeatNit wrote:Are you trying to use HTTPS? Well... don't.

I do not think that is a valid argument.
The server already was configured to do it, the cert just isn't valid anymore.
Why not get a new one and at the same time update the server config?
Sure one can always argue about the importance of data around here, but at least i tried to bring encryption by default one step further.
User avatar
111none
level4
level4
Posts: 970
Joined: Fri Oct 19, 2012 3:32 am
Location: Wangjing, Beijing, Peoples Republic of China

Re: TLS on Introversion pages is currently broken

Postby 111none » Thu Apr 03, 2014 4:30 am

greese wrote:
NeatNit wrote:Are you trying to use HTTPS? Well... don't.

I do not think that is a valid argument.
The server already was configured to do it, the cert just isn't valid anymore.
Why not get a new one and at the same time update the server config?
Sure one can always argue about the importance of data around here, but at least i tried to bring encryption by default one step further.

Even if you did.. The NSA is still watching…. :)

Return to “Introversion Lounge”

Who is online

Users browsing this forum: No registered users and 17 guests