Hacker News Reader

Comment by Gracana | Hacker News Reader

Speaking of privacy badgering... Why won't firefox let me create a security exception to view this page? Without a way to jump through that hoop, I can't even view the page.

View on HN

(Firefox dev here) When you say Security Exception, do you mean you're seeing a certificate error on this page? The certificate is valid for me, so that indicates something dodgy on your end (perhaps a captive portal, or middlebox on a corporate network).

I'm behind a simple NAT, but that's never caused trouble before. Other self-signed certs work fine, but this one doesn't give me the "I understand the risks" option.

Screenshot: http://i.imgur.com/NTLY7ZB.png

You're saying it's completely valid though? Bizarre.

Have you modified your trusted issuer certs? EFF's cert was issued by "StartCom Class 2 Primary Intermediate Server CA"

Oh, you know what? I think I have. IIRC there was news about a cert issuing entity charging to remove insecure certs, so I removed it from my trusted list. I'm sure that's what has caused this issue for me.

if you've modified your roots or are behind invasive proxies and the site uses STS or iframes then exceptions won't be offered.

I saw a bug on this but I'm on my phone and can't find it. It's a misconfiguration on their end. They're missing an intermediate cert in the chain and have HSTS enabled. Oddly, if you visit some other site we'll cache the intermediate and then it will work.

They are probably using HSTS to keep users from accepting unsafe certs. https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security

Reply on news.ycombinator.com