Re: Bad-cert-domain on https://lua-users.org/lists/lua-l/

[Thijs Schreijer <thijs@...>]

> On 21 Jun 2023, at 09:43, Rob Kendrick <rjek@rjek.com> wrote:
> 
> On Tue, Jun 20, 2023 at 05:39:44PM +0200, Thijs Schreijer wrote:
>> 
>> Just visited the mailing list archive at https://lua-users.org/lists/lua-l/ , and got a TLS warning.
>> 
>> Just me?
> 
> This has always been the case - lua-users.org has never had TLS, and
> John Belmonte has never advertised HTTPS links for it.  If you are
> seeing this error, I assume somebody has typoed https out of habbit or
> is running a browser extension that assumes everyone has HTTPS.
> 
> The problem with preventing the error is that it would require a
> dedicated IP address just for lua-users.org: the web server is trying to
> send you an error message saying "nope, no TLS for that hostname" but
> obviously it does not have a certificate for that domain name with which
> to encrypt it, so it uses the default certificate which is that of the
> server's canonical name.
> 
> B.

Yes, checked it. Seems that duckduckgo automatically presents “https" links. If you search for "lua mailing list archive” on Google, it comes up with a plain “http” link.

So this originates from duckduckgo.

regards
Thijs