News for hackers. Stuff that matters.

A comment on Nike.com's robots.txt. Parent comment

Re:Nike.com's robots.txt by input_sh on Friday February 11, 2022 @08:09AM (#30300987)
It's simple, your cert points to *.domain.tld, domain.tld doesn't have a subdomain, <anything>.domain.tld does. You should expand it to include both domain.tld and *.domain.tld.
[ Parent | on HN ]
Re:Nike.com's robots.txt by jffry on Friday February 11, 2022 @08:13AM (#30301034)
It seems like a bad cert is being served at the redirect; the LE cert at https://search.marginalia.nu DOES have both the wildcard and apex domain

See https://news.ycombinator.com/item?id=30301015

[ Parent | on HN ]
Re:Nike.com's robots.txt by MonaroVXR on Friday February 11, 2022 @07:15PM (#30308657)
> .domain.tld

Oof, I'm not sure if I would do that. Since "" stands for all sub domains.

[ Parent | on HN ]