Hacker News Reader

Certificate authority is invalid -- would never visit.

It isn't for me.

The server isn't sending the intermediate CA certificate, so you'll get errors unless your browser has cached the LetsEncrypt intermediate (for example from having browsed a different site that sent the LetsEncrypt intermediate). "This server's certificate chain is incomplete. Grade capped to B."

Anyways, they score an "F" on SSLLabs because "This server is vulnerable to the OpenSSL Padding Oracle vulnerability (CVE-2016-2107) and insecure. Grade set to F."

https://www.ssllabs.com/ssltest/analyze.html?d=typed.pw&s=10...

Reply on news.ycombinator.com