Securing access to Wikimedia sites with HTTPS by default

Re:Securing access to Wikimedia sites with HTTPS by default by d0ugie on Friday June 12, 2015 @11:24AM (#9706432)

Not perfect, but wikimedia scores a respectable A on ssllabs:

Same IP as en.wikipedia.org, so does that mean they're using SNI to serve different certs? http://caniuse.com/#search=sni

[ Parent | on HN ]

Re:Securing access to Wikimedia sites with HTTPS by default by schoen on Friday June 12, 2015 @01:13PM (#9707220)

Nope, it's a wildcard cert -- if you view the cert contents you see that the subject includes

CN = *.wikipedia.org

[ Parent | on HN ]

Re:Securing access to Wikimedia sites with HTTPS by default by _joe on Friday June 12, 2015 @03:40PM (#9708096)

Actually, it's a bit more complicated than that. We don't just serve .wikipedia.org from our frontends, but also e.g. .wikisource.org etc.

So yes, we are using SNI but for wildcart certs :)

[ Parent | on HN ]