Skip to content
This repository has been archived by the owner on Jan 3, 2019. It is now read-only.

SSL-problems with https://stats.hivewallet.com/ #5

Open
dnivi3 opened this issue Aug 26, 2014 · 8 comments
Open

SSL-problems with https://stats.hivewallet.com/ #5

dnivi3 opened this issue Aug 26, 2014 · 8 comments

Comments

@dnivi3
Copy link

dnivi3 commented Aug 26, 2014

When connecting to https://stats.hivewallet.com/ I receive an SSL-error:

screenshot 2014-08-26 08 59 02

The error message says this:

Technical Details

stats.hivewallet.com uses an invalid security certificate.

The certificate is only valid for the following names:
* .herokuapp.com, herokuapp.com

(Error Code: ssl_error_bad_cert_domain)
@weilu
Copy link
Member

weilu commented Aug 26, 2014

Use http://stats.hivewallet.com instead

@weilu weilu closed this as completed Aug 26, 2014
@dnivi3
Copy link
Author

dnivi3 commented Aug 26, 2014

@weilu, nope same problem. It redirects to https://stats.hivewallet.com/

I'm on Mac, Firefox 31.

@weilu weilu reopened this Aug 27, 2014
@weilu
Copy link
Member

weilu commented Aug 27, 2014

That's strange. It works fine for me on both chrome and firefox on mac. @tgerring thoughts?

@tgerring
Copy link
Member

Verified HTTP works without redirect on iOS/Safari

@mackuba
Copy link
Member

mackuba commented Aug 27, 2014

Was there any kind of redirect at some point in the past? I've noticed some time ago that browsers (at least Chrome) remember these kind of things and it's very hard to make them forget...

@dnivi3
Copy link
Author

dnivi3 commented Aug 27, 2014

Might be related to this: http://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security

Someone I know had a problem with the above messing up subdomains on their websites.

@dnivi3
Copy link
Author

dnivi3 commented Sep 8, 2014

So, any updates on this, @jsuder, @tgerring and @weilu?

@weilu
Copy link
Member

weilu commented Sep 9, 2014

I can see how HSTS could limit access to https only on all subdomains -- If I understand HSTS correctly, with the current setting on web.hivewallet.com, the browser is supposed to prevent any traffic to http://stats.hivewallet.com immediately after visiting web.hivewallet.com. However it is not doing it on my browser. I'm not sure why =/

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants