CS 189: Introduction to Machine Learning
11–20 of 24 posts
Re: CS 189: Introduction to Machine Learning
#12Re: CS 189: Introduction to Machine Learning
#13Earlier quoted context omitted.
disclaimer: i work for berkeley EECS, but have no association w/these faculty or class. TL;DR: they probably wanted to save some money by not paying our instructional group to do the hosting, and instead are (most likely) paying github for hosting. because they're doing this themselves, it means that things like real, working SSL certs are their responsibility, and most likely were "too hard" or would take "too long"…
Github is free for open source
Re: CS 189: Introduction to Machine Learning
#14Re: CS 189: Introduction to Machine Learning
#15The SSL certificate used here does not match the domain name as it is Github's wildcard certificate.
Re: CS 189: Introduction to Machine Learning
#16The SSL certificate used here does not match the domain name as it is Github's wildcard certificate.
Re: CS 189: Introduction to Machine Learning
#17The SSL certificate used here does not match the domain name as it is Github's wildcard certificate.
You're right. I looked into this a little further. The data is encrypted with Github's private key (thus decrypted with their public cert). I then wondered how he got a copy of Github's private key...but as it turns out, the IP does belong to Github. In either event, definitely misconfigured, but I added an exception as it all seems legit in the end. It looks like he's just hosting his site (with his own DNS) on gith…
I don't think that's how it works, because then anyone could decrypt the data since the decryption key is public.
Rather, I think how asymmetric crypto works is you pass your public key to them so they can encrypt stuff with it and send it to you to decrypt with your private key. Then, to send stuff to them, you use their public key to encrypt the data for them so they can decrypt with their private key. That said, I think TLS works differently by using asymmetric crypto only to negotiate a symmetric key for the actual encryption of data.
EDIT: made wording more precise
Re: CS 189: Introduction to Machine Learning
#18The SSL certificate used here does not match the domain name as it is Github's wildcard certificate.
Re: CS 189: Introduction to Machine Learning
#19The SSL certificate used here does not match the domain name as it is Github's wildcard certificate.
Re: CS 189: Introduction to Machine Learning
#20Earlier quoted context omitted.
You're right. I looked into this a little further. The data is encrypted with Github's private key (thus decrypted with their public cert). I then wondered how he got a copy of Github's private key...but as it turns out, the IP does belong to Github. In either event, definitely misconfigured, but I added an exception as it all seems legit in the end. It looks like he's just hosting his site (with his own DNS) on gith…
disclaimer: i work for berkeley EECS, but have no association w/these faculty or class. TL;DR: they probably wanted to save some money by not paying our instructional group to do the hosting, and instead are (most likely) paying github for hosting. because they're doing this themselves, it means that things like real, working SSL certs are their responsibility, and most likely were "too hard" or would take "too long"…