Earlier quoted context omitted.
What is "this"?
Being wiped from the internet by a disagreeable CA authority. If that is what "this" is.
FWIW, onion addresses don't require a cert, they are end-to-end encrypted by design.
Tell HN: Sci-Hub's TLS certificate has started failing
11–20 of 154 posts
Re: Tell HN: Sci-Hub's TLS certificate has started failing
#12crt.sh reports it was revoked on the 26th: https://crt.sh/?id=274083328
Issuer: COMODO
Re: Tell HN: Sci-Hub's TLS certificate has started failing
#13Earlier quoted context omitted.
Likely they mean censorship via certificate revocation, which it isn't clear yet that this is, but they have a valid point. If you put control over your trust in a third party, you give them the power to do this kind of thing.
You can always manually trust certificates via various means, it's the basis for almost any corporate network, most browsers also offer a simply dialog to bypass certificate warnings.
Browsers seem to be moving towards making it harder to bypass, which is probably a good thing for the average user. I wouldn't be surprised to see the ability to ignore https errors (or access http sites at all) locked behind a developer setting or something.
Re: Tell HN: Sci-Hub's TLS certificate has started failing
#14It probably depends on what domain youre using.
This seems to affect all their domain variants, but it still works without encryption: http://sci-hub.tw
Edit: already noted by detaro https://news.ycombinator.com/item?id=16952051
Re: Tell HN: Sci-Hub's TLS certificate has started failing
#15This is exactly what I said would happen when Google started making all of us use HTTPS.
Oh, look. Google as the absolute arbiter of information. Who could've ever predicted that they'd start using their position for evil?
Re: Tell HN: Sci-Hub's TLS certificate has started failing
#16It probably depends on what domain youre using.
This seems to affect all their domain variants, but it still works without encryption: http://sci-hub.tw Edit: already noted by detaro https://news.ycombinator.com/item?id=16952051
I just tried https://sci-hub.tw/ (Chrome) and got a secure connection without warnings. Since the issuer of the certificate that my browser showed for the connection is "Comodo" I guess the revocation didn't reach my browser yet?
EDIT:
IE and Firefox say "insecure".
What really annoys me: There does not seem to be any way - none that I could find - to get IE and Firefox to connect anyway?
Re: Tell HN: Sci-Hub's TLS certificate has started failing
#17Earlier quoted context omitted.
This seems to affect all their domain variants, but it still works without encryption: http://sci-hub.tw Edit: already noted by detaro https://news.ycombinator.com/item?id=16952051
I just tried https://sci-hub.tw/ (Chrome) and got a secure connection without warnings. Since the issuer of the certificate that my browser showed for the connection is "Comodo" I guess the revocation didn't reach my browser yet? EDIT: IE and Firefox say "insecure". What really annoys me: There does not seem to be any way - none that I could find - to get IE and Firefox to connect anyway?
AFAIK Chrome doesn't check the CA revocation lists (but instead an aggregation of them by Google), so it doesn't know yet the cert is "bad".
Re: Tell HN: Sci-Hub's TLS certificate has started failing
#18Earlier quoted context omitted.
You can always manually trust certificates via various means, it's the basis for almost any corporate network, most browsers also offer a simply dialog to bypass certificate warnings.
Browsers seem to be moving towards making it harder to bypass, which is probably a good thing for the average user. I wouldn't be surprised to see the ability to ignore https errors (or access http sites at all) locked behind a developer setting or something.
On Chrome I can see that but I doubt Firefox would make that move.
Plus, they won't remove the functionality to manually trust a cert (Business Users would complain).
Re: Tell HN: Sci-Hub's TLS certificate has started failing
#19Earlier quoted context omitted.
This seems to affect all their domain variants, but it still works without encryption: http://sci-hub.tw Edit: already noted by detaro https://news.ycombinator.com/item?id=16952051
I just tried https://sci-hub.tw/ (Chrome) and got a secure connection without warnings. Since the issuer of the certificate that my browser showed for the connection is "Comodo" I guess the revocation didn't reach my browser yet? EDIT: IE and Firefox say "insecure". What really annoys me: There does not seem to be any way - none that I could find - to get IE and Firefox to connect anyway?
On sci-hub.hk I get a non-SSL connection, if I try the 'trick' of http://journal_name.springer.com.sci-hub.hk/path/to?article I get the revoked SSL certificate
Firefox 59
Re: Tell HN: Sci-Hub's TLS certificate has started failing
#20Earlier quoted context omitted.
This seems to affect all their domain variants, but it still works without encryption: http://sci-hub.tw Edit: already noted by detaro https://news.ycombinator.com/item?id=16952051
I just tried https://sci-hub.tw/ (Chrome) and got a secure connection without warnings. Since the issuer of the certificate that my browser showed for the connection is "Comodo" I guess the revocation didn't reach my browser yet? EDIT: IE and Firefox say "insecure". What really annoys me: There does not seem to be any way - none that I could find - to get IE and Firefox to connect anyway?
There does not seem to be any way - none that I could find - to get IE and Firefox to connect anyway?
In Firefox, I think you can only by disabling the check (Preferences → Advanced → Certificates → Query OCSP ...). You probably don't want to keep that disabled, though.