Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Bing doesn't support SSL

bing.com

Post reply on HN
Print view View original

71–80 of 163 posts

Re: Bing doesn't support SSL

#71

Post by freehunter »

casca wrote: post #2

TL;DR: bing SSL certificate is wrong. https://bing.com : subject=/CN=*.bing.com https://www.bing.com : subject=/C=US/O=Akamai Technologies, Inc./CN=a248.e.akamai.net

Working in information security, I see this far, far too often in support tickets from employees who are unable to get to a site because our proxy is blocking misconfigured certificates. Usually we like to reach out to the owner of the site and have them update their configuration, and it gets quite frustrating when we find an unresponsive organization. Having to bypass cert checking for a site on our end is a huge security risk, and defeats the purpose of even having an SSL cert.

Companies! Make sure your certs are all in order! There's no reason to send a page to your users over HTTPS if they can't trust the certificate. Canonical has been a long-time offender of this, with many of their pages sporting a certificate signed to canonical.com but being served by ubuntu.com.

Re: Bing doesn't support SSL

#72

Post by dools »

nopal wrote: post #5

I made a site that checked for SSL cert expirations and misconfigurations, but I couldn't acquire any customers. I still think there's a business there somewhere, although maybe it really only sells as part of another product. Edit: If anyone wants a script to check their certificates, here you go: https://gist.github.com/bretwalker/5420652 . You'll just need to add in some sort of notification logic, especially for…

I love this one:

http://www.whynopadlock.com/

Re: Bing doesn't support SSL

#74

Post by gcb0 »

vitorarins wrote: post #16
return0 wrote: post #13

Earlier quoted context omitted.

Actually the warning message from chrome is pretty lengthy

At first I thought it was a joke from Google. Something like: "No you don't want to use bing, here is google."

...what kind of massage you received?

My browser only talk about the warning, but i only have old chromium... Not auto-updating g chrome

Re: Bing doesn't support SSL

#75

Post by SoftwareMaven »

nopal wrote: post #5

I made a site that checked for SSL cert expirations and misconfigurations, but I couldn't acquire any customers. I still think there's a business there somewhere, although maybe it really only sells as part of another product. Edit: If anyone wants a script to check their certificates, here you go: https://gist.github.com/bretwalker/5420652 . You'll just need to add in some sort of notification logic, especially for…

Venafi[1] has made a pretty good business out of cert management.

1. http://www.venafi.com/solutions/ssl-certificate-management/

Re: Bing doesn't support SSL

#76

Post by jimbobimbo »

webignition wrote: post #59

Slightly off-topic: what's a good way to handle cases such as this where you have a wildcard certificate? I'll be getting a wildcard certificate for a project and, never having used one before, I had assumed the certificate would be valid for an entire domain. I understand from this situation that a wildcard certificate is relevant only to https://*.example.com and not the subdomainless https://example.com . Assuming…

Depends on the type of cert. There're EV SSL certificates that do not allow wildcards, for example.

Re: Bing doesn't support SSL

#77

Post by NelsonMinar »

Bing is important. It's a good search engine, comparable to Google's quality and size. And it's the only competition Google has in the US and most of Europe. (Sites like DuckDuckGo and Yahoo pass queries on to Bing). Dumb errors like this SSL problem are embarassing, but the larger frustration is how despite years of having a good product, they have so little market traction.

Re: Bing doesn't support SSL

#78

Post by brokentone »

elliottcarlson wrote: post #60
casca wrote: post #2

TL;DR: bing SSL certificate is wrong. https://bing.com : subject=/CN=*.bing.com https://www.bing.com : subject=/C=US/O=Akamai Technologies, Inc./CN=a248.e.akamai.net

We were experiencing a similar issue with a third party analytics solution where their SSL cert all of the sudden started to be delivered by Akamai as opposed to the FQDN of the company, as it was before. I am curious if Akamai is at fault here?

This is Akamai kinda trying to serve HTTPS on domains that don't have HTTPS setup. I'm not sure why they attempt it at all, but it's not really their fault. Same thing on my domain: https://www.theblaze.com/

Re: Bing doesn't support SSL

#79

Post by sdfjkl »

nopal wrote: post #5

I made a site that checked for SSL cert expirations and misconfigurations, but I couldn't acquire any customers. I still think there's a business there somewhere, although maybe it really only sells as part of another product. Edit: If anyone wants a script to check their certificates, here you go: https://gist.github.com/bretwalker/5420652 . You'll just need to add in some sort of notification logic, especially for…

I usually put a check for "SSL certificate expires in less than 30 days" in the NMS. There is certainly a market for network monitoring as a service and this is a useful check to have in one.
Post reply on HN