Tell HN: Sci-Hub's TLS certificate has started failing

#1

Post by AlbertoGP » Sun, Apr 29, 2018, 1:05 PM UTC

Sci-Hub started failing earlier today with a SEC_ERROR_REVOKED_CERTIFICATE error, which affects all alternative Web addresses. Don't know about .onion.

Is this some kind of planned maintenance, or a sign of further trouble?

Re: Tell HN: Sci-Hub's TLS certificate has started failing

#2

Post by 06983234 » Sun, Apr 29, 2018, 1:59 PM UTC

This is exactly what I said would happen when Google started making all of us use HTTPS.

Re: Tell HN: Sci-Hub's TLS certificate has started failing

#3

Post by detaro » Sun, Apr 29, 2018, 2:01 PM UTC

06983234 wrote: post #2

This is exactly what I said would happen when Google started making all of us use HTTPS.

What is "this"?

Re: Tell HN: Sci-Hub's TLS certificate has started failing

#4

Post by agumonkey » Sun, Apr 29, 2018, 2:01 PM UTC

It probably depends on what domain youre using.

Re: Tell HN: Sci-Hub's TLS certificate has started failing

#5

Post by 06983234 » Sun, Apr 29, 2018, 2:02 PM UTC

detaro wrote: post #3

06983234 wrote: post #2

This is exactly what I said would happen when Google started making all of us use HTTPS.

What is "this"?

Being wiped from the internet by a disagreeable CA authority. If that is what "this" is.

Re: Tell HN: Sci-Hub's TLS certificate has started failing

#6

Post by theoctopus » Sun, Apr 29, 2018, 2:04 PM UTC

crt.sh reports it was revoked on the 26th: https://crt.sh/?id=274083328

Re: Tell HN: Sci-Hub's TLS certificate has started failing

#7

Post by [deleted] » Sun, Apr 29, 2018, 2:05 PM UTC

[deleted]

Re: Tell HN: Sci-Hub's TLS certificate has started failing

#8

Post by AnIdiotOnTheNet » Sun, Apr 29, 2018, 2:05 PM UTC

detaro wrote: post #3

06983234 wrote: post #2

This is exactly what I said would happen when Google started making all of us use HTTPS.

What is "this"?

Likely they mean censorship via certificate revocation, which it isn't clear yet that this is, but they have a valid point. If you put control over your trust in a third party, you give them the power to do this kind of thing.

Re: Tell HN: Sci-Hub's TLS certificate has started failing

#9

Post by tscs37 » Sun, Apr 29, 2018, 2:08 PM UTC

AnIdiotOnTheNet wrote: post #8

detaro wrote: post #3

Earlier quoted context omitted.

What is "this"?

Likely they mean censorship via certificate revocation, which it isn't clear yet that this is, but they have a valid point. If you put control over your trust in a third party, you give them the power to do this kind of thing.

You can always manually trust certificates via various means, it's the basis for almost any corporate network, most browsers also offer a simply dialog to bypass certificate warnings.

Re: Tell HN: Sci-Hub's TLS certificate has started failing

#10

Post by detaro » Sun, Apr 29, 2018, 2:09 PM UTC

tscs37 wrote: post #9

AnIdiotOnTheNet wrote: post #8

Earlier quoted context omitted.

Likely they mean censorship via certificate revocation, which it isn't clear yet that this is, but they have a valid point. If you put control over your trust in a third party, you give them the power to do this kind of thing.

You can always manually trust certificates via various means, it's the basis for almost any corporate network, most browsers also offer a simply dialog to bypass certificate warnings.

You can also just use HTTP, since sci-hub doesn't force HTTPS.