Sciencemadness Discussion Board

https server security

12AX7 - 28-8-2008 at 06:51

Realizing I haven't connected to the https server since I installed Firefox 3, I discovered it considers the security certificate invalid. I wonder if this might be because the URL listed is "sciencemadness.org", when it is, in fact, "www.(...)"? Indeed, connecting to "https://sciencemadness.org" succeeds.

I think the non-www domain should redirect to avoid this problem?

Tim

argyrium - 28-8-2008 at 12:39

For what it is worth. Before the site actually loads to the https, a security message pops up for me as well. I usually use Safari (Mac).

Obviously, if entering the site through http://www.sciencemadness.org, no security message appears; nor does it appear when logging into the site from that address.

turd - 29-8-2008 at 07:16

Quote:
Originally posted by 12AX7
Indeed, connecting to "https://sciencemadness.org" succeeds.

No, it doesn't. Not unless you installed the "security exception".
And it says why in big fat bold letters:
Quote:
sciencemadness.org uses an invalid security certificate.

The certificate is not trusted because it is self signed.

For more information click on the lock symbol in the status bar and then "View Certificate".

12AX7 - 29-8-2008 at 07:46

Oops, I must've forgot www. Obviously that would be inconsistent with my whole point! Dang, can't edit it now.

Tim

[Edited on 8-29-2008 by 12AX7]