NeverSSL • Hacker News Board

Re: NeverSSL

#11

Post by mypalmike » Sat, Nov 02, 2019, 9:47 PM UTC

I miss the old purple page at purple.com which unintentionally served the same purpose. Comcast techs used to use it as a test for whether you were in their captive portal.

Re: NeverSSL

#12

Post by reaperducer » Sat, Nov 02, 2019, 9:47 PM UTC

dinkleberg wrote: post #8

gk1 wrote: post #2

I use captive.apple.com if a public network fails to load the login/getting-started page.

That's super useful, I never knew about that.

It's what iOS uses. Not sure about macOS.

Re: NeverSSL

#13

Post by Operyl » Sat, Nov 02, 2019, 9:48 PM UTC

reaperducer wrote: post #12

dinkleberg wrote: post #8

Earlier quoted context omitted.

That's super useful, I never knew about that.

It's what iOS uses. Not sure about macOS.

Same on macOS.

Re: NeverSSL

#14

Post by lolinder » Sat, Nov 02, 2019, 9:49 PM UTC

Any idea why http://neverssl.com redirects to http://{random_characters}.neverssl.com?

Re: NeverSSL

#15

Post by monocularvision » Sat, Nov 02, 2019, 9:50 PM UTC

gk1 wrote: post #2

I use captive.apple.com if a public network fails to load the login/getting-started page.

I used the same until I recently hit a network that allowed that site but was captive for everything else. No idea what would inspire that configuration.

Re: NeverSSL

#16

Post by segfaultbuserr » Sat, Nov 02, 2019, 9:51 PM UTC

lolinder wrote: post #14

Any idea why http://neverssl.com redirects to http://{random_characters}.neverssl.com ?

Avoid caching.

Re: NeverSSL

#17

Post by asveikau » Sat, Nov 02, 2019, 9:52 PM UTC

ajaimk wrote: post #7

I use captive.apple.com regularly but just realized that https was the issue being worked around on WiFi. Learning something new.

What do you mean by "the issue being worked around"?

The issue is that https cannot be intercepted by such an access point, and is increasingly popular for all types of web use. "Being worked around" makes it sound like something different, perhaps even sinister.

Re: NeverSSL

#18

Post by Nican » Sat, Nov 02, 2019, 9:52 PM UTC

lolinder wrote: post #14

Any idea why http://neverssl.com redirects to http://{random_characters}.neverssl.com ?

Probably avoid caching. Just taking a guess, but you do not want your DNS cached when the poorly-programmed router login page is trying to spoof DNS, and redirect you to their login portal.

Re: NeverSSL

#19

Post by paulirish » Sat, Nov 02, 2019, 9:53 PM UTC

lolinder wrote: post #14

Any idea why http://neverssl.com redirects to http://{random_characters}.neverssl.com ?

Apparently because ISPs sometimes muck with caching headers? https://twitter.com/NeverSSL/status/1136491293113180160

Re: NeverSSL

#20

Post by smitty1e » Sat, Nov 02, 2019, 9:54 PM UTC

Then there is http://uselessaccount.com/