News for hackers. Stuff that matters.
Re:Ask HN: Put my entire website behind ssl? by rubyskills on Thursday April 07, 2011 @05:00PM (#2421178)
Wow, I didn't think about twitter's button. :-/ We use the twitter widget.. Do you know if the twitter js is behind a valid cert?
Re:Ask HN: Put my entire website behind ssl? by rdin on Thursday April 07, 2011 @05:07PM (#2421206)
Unfortunately, it's been invalid for awhile. You can check it out for yourself here:

http://platform.twitter.com/widgets.js vs https://platform.twitter.com/widgets.js

Re:Ask HN: Put my entire website behind ssl? by rubyskills on Thursday April 07, 2011 @05:14PM (#2421238)
Drat! Someone over at twitter should fix this. :(

Luckily, we don't use that js, we use:

http://twitter.com/javascripts/blogger.js

and I just checked the certificate behind this and it's valid (I should hope twitter's main cert is valid!):

https://twitter.com/javascripts/blogger.js

and we use the json API:

http://api.twitter.com/statuses/user_timeline/healpay.json?c...

which also happens to have a valid cert:

https://api.twitter.com/statuses/user_timeline/healpay.json?...

So it looks like we're in the clear for this at least :)