lua-users home
lua-l archive

[Date Prev][Date Next][Thread Prev][Thread Next] [Date Index] [Thread Index]

On Wed, Aug 23, 2023, 08:14 Paul Ducklin <> wrote:
>Your browser is buggy, or your links to
>the site are wrong. 

The site presents a certificate with the wrong name on it when you visit

And this is unquestionably a bug on the site itself. There is zero excuse for serving invalid certificates.

If the site does not want to be accessible over HTTPS (and I'll refrain from adding to the argument against that even though every bone in my body wants to), then at the ABSOLUTE BARE MINIMUM it should not listen on port 443 at all - i.e. accessing should return a simple 404 error, not a security warning.