Live data from Hacker News

Bing doesn't support SSL

bing.com

151–160 of 163 posts

Re: Bing doesn't support SSL

#153
post #97
post #2

TL;DR: bing SSL certificate is wrong. https://bing.com : subject=/CN=*.bing.com https://www.bing.com : subject=/C=US/O=Akamai Technologies, Inc./CN=a248.e.akamai.net

TL;DR: Bing doesn't support SSL on www.bing.com and has never publicized it as a supported feature. The submitter had to manually type https://www.bing.com into the address bar to generate this 'error'. Bing does support SSL on ssl.bing.com and publishes various links on that sub-domain, such as https://ssl.bing.com/webmaster/home/mysites The fact that the https://www.bing.com redirects to the HTTP version should be…

The bing.com certificate says it is valid for the following names: ieonline.microsoft.com , .bing.com , .windowssearch.com. So why does https://www.bing.com not match *.bing.com?

Re: Bing doesn't support SSL

#156
post #74

Earlier quoted context omitted.

...what kind of massage you received? My browser only talk about the warning, but i only have old chromium... Not auto-updating g chrome

All people giving downvotes to this comment, I think you are being unfair to this person who just seems to have a bad English. He probably meant "message".

was typed on swype :) didn't notice the typo

Re: Bing doesn't support SSL

#157
post #129

Earlier quoted context omitted.

I don't think browsers should assume that http://blahblah and https://blahblah refer to the same resource.

Why not?

Because it's up to the individual website administrator to ensure he published them both the same way.

I can construct a web server that sends version A of a site over normal HTTP, and version B of that same site over HTTPS.

In fact, sometimes I do that by accident. :)

It's a bad assumption.

Re: Bing doesn't support SSL

#158
post #35

Earlier quoted context omitted.

Very useful. It's not a super hard problem to solve, but I did think it provided enough value that companies would be willing to pay for it. SSL is used on the most important pieces of a business' infrastructure, I thought it'd be a simple sell. I also can't tell if certalert.me checks for hostname mismatches. That was another part of my service, because a misconfiguration is just as fatal as an expired certificate.

Out of curiosity.. how much money were you trying to charge for the service?

I think $5 for 5 sites, $10 for 15 and $20 for 50.

Re: Bing doesn't support SSL

#159

Earlier quoted context omitted.

I think it's as simple as having chosen an awful name. Bing is physically difficult to pronounce and it evokes no meaning whatsoever.

Do you really the pronunciation difficulty and lack of meaning is so significantly different than "Google" was when it launched? It's more vocalized, yes, but only a single syllable for Google's two, and relatively noone actually think of "googolplex" when talking about Google. The sound "bing", I think, conveys speediness, which they took advantage of with the slogan "Bing and decide". It's a quick, sharp sound - as…

You have to move your mouth into a strange position to say the word's single syllable. And it's an opinion, as common as it may be, that Bing is an awful name for a search engine.

When I first heard of the search engine google, I was immediately reminded of those childhood conversations about a number with 100 zeros following it. So yes, instant evocation. And maybe this would only happen with geeks, but that's exactly who they needed to convince to use their search engine.

Microsoft seems to have decided to ignore geeks and just markets directly to 'average users'. This to me seems like a very poor strategy. No smart people telling you to use Bing or Windows 8 and guess what...

Re: Bing doesn't support SSL

#160
post #97

Earlier quoted context omitted.

TL;DR: Bing doesn't support SSL on www.bing.com and has never publicized it as a supported feature. The submitter had to manually type https://www.bing.com into the address bar to generate this 'error'. Bing does support SSL on ssl.bing.com and publishes various links on that sub-domain, such as https://ssl.bing.com/webmaster/home/mysites The fact that the https://www.bing.com redirects to the HTTP version should be…

The bing.com certificate says it is valid for the following names: ieonline.microsoft.com , .bing.com , .windowssearch.com. So why does https://www.bing.com not match *.bing.com?

Because www.bing.com is served by akamai CDN which is different to bing.com. Therefore the SSL on the site is different.
Post reply on HN