Live data from Hacker News

Bing doesn't support SSL

bing.com

61–70 of 163 posts

Re: Bing doesn't support SSL

#63

Slightly off-topic: what's a good way to handle cases such as this where you have a wildcard certificate? I'll be getting a wildcard certificate for a project and, never having used one before, I had assumed the certificate would be valid for an entire domain. I understand from this situation that a wildcard certificate is relevant only to https://*.example.com and not the subdomainless https://example.com . Assuming…

Not all that off-topic. For your example, you should get a certificate made out to ("Subject CN") example.com or * .example.com, then list both the wildcard and the subdomainless entry as Subject Alternative Names.

Bing is doing something similar (see https://news.ycombinator.com/item?id=5576271), but they appear to have forgotten to list the plain domain.

Re: Bing doesn't support SSL

#64
post #54

The real question is, is bing.com even supposed to be served over https?

With very few exceptions, everything is supposed to be served over HTTPS (or other secure protocols). Certainly something as sensitive as search traffic. Tell me your search queries and I'll tell you your interests, health problems, relationships, if you're happy in your job and what kind of porn you like.

Re: Bing doesn't support SSL

#65

Slightly off-topic: what's a good way to handle cases such as this where you have a wildcard certificate? I'll be getting a wildcard certificate for a project and, never having used one before, I had assumed the certificate would be valid for an entire domain. I understand from this situation that a wildcard certificate is relevant only to https://*.example.com and not the subdomainless https://example.com . Assuming…

Typically a certificate issuer will grant you both when you buy a wildcard one.

This can be achieved via SAN (alternative names): http://en.wikipedia.org/wiki/Wildcard_certificate#Limitation

Re: Bing doesn't support SSL

#66

Earlier quoted context omitted.

comment of the day!

To Microsoft : Please fix your IE debacle ( somehow!!).. Its affecting your other products.. Its reputation is becoming infectious.

Well, we are finally getting rid of IE6 and IE7. There is still a problem with IE8 market share but the upgrade inertia is nowhere as bad as IE6.

Microsoft is definitively cleaning its tab.

Re: Bing doesn't support SSL

#67
post #2

TL;DR: bing SSL certificate is wrong. https://bing.com : subject=/CN=*.bing.com https://www.bing.com : subject=/C=US/O=Akamai Technologies, Inc./CN=a248.e.akamai.net

We were experiencing a similar issue with a third party analytics solution where their SSL cert all of the sudden started to be delivered by Akamai as opposed to the FQDN of the company, as it was before. I am curious if Akamai is at fault here?

Was this in the past week? Because just a few days ago I was experiencing a similar problem. I attempted to access https://rememberthemilk.com and chrome complained about the SSL cert, as I was receiving the cert for their CDN and not for rememberthemilk itself. I couldn't find anyone that could reproduce the issue, but it occurred consistently on my computer regardless of browser. It resolved itself 20 min after I first noticed it, but I'm still really curious as to why it happened in the first place.

Re: Bing doesn't support SSL

#68
post #38

Earlier quoted context omitted.

I know about funny word differences, but we have no problems learning russian, why russians would have problems learning polish? this is my favorite http://translate.google.com/#ru/pl/%D0%BA%D0%BE%D0%B2%D0%B5%... (in polish it sounds like 'caviar in a can')

Well, I know neither Polish nor Russian, but here in Prague I know a lot of Russians that never learn to say the word dobrý. They say dobry(short y) instead, which exists in Russian. They never learn to say it long, even when you point it out to them.

oh, I get it.

we also share a lot of funny misunderstandings with czech. čerstvý chléb is zatuchlý chléb in polish, imagine being there for the first time and seeing grocery stores advertising old bread :D

Re: Bing doesn't support SSL

#69
post #5

I made a site that checked for SSL cert expirations and misconfigurations, but I couldn't acquire any customers. I still think there's a business there somewhere, although maybe it really only sells as part of another product. Edit: If anyone wants a script to check their certificates, here you go: https://gist.github.com/bretwalker/5420652 . You'll just need to add in some sort of notification logic, especially for…

Which protocols do you support besides https? imap or pop with tls perhaps?

Yes, IMAP and POP were supported: https://gist.github.com/bretwalker/5420652
Post reply on HN