Comment by halosghost | Hacker News Reader

Top New Best Ask Show Jobs

Comment by halosghost | Hacker News Reader

Parent Full thread

> Unacceptable TLS Certificate

It would be really nice if the new services commonly showcased on "Show HN" would take the time to correctly implement HTTPS. In fact, since my browser is set to strict-ssl enforcement, I cannot load the webpage at all.

Indeed, the site is being served without a proper certificate chain: https://whatsmychaincert.com/?blankslate.io

Also vulnerable to POODLE.

https://www.ssllabs.com/ssltest/analyze.html?d=blankslate.io

I have my browser set to everything default and I get:

blankslate.io uses an invalid security certificate.

The certificate is not trusted because no issuer chain was provided.

(Error code: sec_error_unknown_issuer)

Reply on news.ycombinator.com