Hacker News Reader

Comment by Ricapar | Hacker News Reader

Looks like someone pushed the wrong SSL cert to production:

  www.bing.com uses an invalid security certificate.
  
  The certificate is only valid for the following names:
    a248.e.akamai.net , *.akamaihd.net , *.akamaihd-staging.net  

  (Error code: ssl_error_bad_cert_domain)

View on HN

Australian Ebay (https://www.ebay.com.au/) has had the same problem for months, although I appear to get no response for https://www.ebay.com, so I'm not sure what their policy is on SSL access to the homepage.

I expect that Microsoft will fix Bing much more quickly.

Mandrill has also had this problem for months (I notified them, but still broken) https://www.mandrill.com/

Passed this on to relevant team to look into for you (I'm with PayPal myself, so not sure about eBay's SSL approach).

It's been this way since 2009... http://revealingerrors.com/akamai_ssl

http://revealingerrors.com/akamai_ssl

The post does not explain why Akamai's cert is being used. If bing over SSL were working correctly in the past---which I believe to be true---and given that Bing were using Akamai in the past, why the problem now?

nope, bing did not work correctly in the past. A few web searches reveal that it has been like that since at least 2011.

Bing doesn't do SSL and never has at that domain (they previously used ssl.bing.com). you're seeing an Akamai cert because Akamai servers are hosting bing.com.

Reply on news.ycombinator.com