Re:Tell HN: Sci-Hub's TLS certificate has started failing
by tialaramex on Sunday April 29, 2018 @09:08PM
(#16954980)
The person you're replying to doesn't have any problem with certs. Their problem is that they (or their employer) hijack a TLD for whatever ludicrous reason, and HSTS pre-loading applies to their hijacked names the same as it would to real names.
[ Parent
| on HN ]
Re:Tell HN: Sci-Hub's TLS certificate has started failing
by pfg on Monday April 30, 2018 @01:55AM
(#16956121)
Are you sure? The initial post was about .dev being HSTS-preloaded, but the comment I was replying to was an answer to the suggestion that they could use self-signed certificates after importing them to the trust store.
Re:Tell HN: Sci-Hub's TLS certificate has started failing
by Sir_Substance on Monday April 30, 2018 @05:06AM
(#16956980)
Yeah, and having read over this thread about three times I'm actually less sure than I was. I'll be checking today.
Re:Tell HN: Sci-Hub's TLS certificate has started failing
by Kadin on Sunday April 29, 2018 @10:14PM
(#16955214)
Ah, got it.
Well, another argument in favor of not overloading TLDs for internal domains, then, and just buying an additional domain if you really want to have separate internal and external domains.