[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
McAfee's certificate on akamai seems to be invalid
On 5/7/20 12:16 PM, Niels Bakker wrote:
> It looks like you shouldn't attempt to access that site over HTTPS, just
> via plain HTTP. Do you have any official bit of documentation
> that links to the HTTPS version?
Given the prevalence of opportunistic upgrades to TLS these days, I'd
argue that having a misbehaving server listing on 443 (and accepting SNI
for a name that works on plain HTTP, if applicable) at the same domain
as a well-known, public HTTP server, especially from a "security"
company, is a poor idea.
--
Brandon Martin