Wikipedia's https certificate expired.

https://secure.wikimedia.org/wikipedia/en/wiki/Ninja

by kgo • 15 years ago

13 9 15 years ago

secure.wikimedia.org

Joakal4• 15 years ago

Massive certificate warning. Technical words. Expired 5 minutes ago. And I'm using FF4.

Seems like FF continues to have no consideration for the non-technical audience who will click 'Get me out of there' or close the tab. And just because the certificate expired 5 minutes ago.

This is why I'm not forcing https onto visits.

mooism22• 15 years ago

FF uses scary language etc specifically so that non-techies won't ignore the warning. Make it so that non-techies ignore the warning for Wikipedia and they will ignore it when the connection to their bank is being mitmed.

Why are you blaming Firefox? Why do you not blame Wikipedia for not admining their servers properly?

Joakal4• 15 years ago

This is wikipedia, learning stuff so eavesdroppers can't read the connection.

I hardly think a massive "This Connection is Untrusted" for a 5 minute expired certificate on the same level as a warning saying "This certificate is not valid for this website" is appropriate.

saulrh• 15 years ago

    > the non-technical audience who will click 'Get me out of there' or close the tab.

This is the right thing to do. You do not attempt to second-guess a certificate expiration for any reason. If you program in a way to ignore a bad security certificate, I can guarantee you that that will immediately be used to defeat the entire system, and that leads directly to grandmothers giving their credit card details to J. Random Phisher.

Joakal4• 15 years ago

The standard with scary messages (even a 5 minute expiry) with encrypted connections? Or the one where the standard is unencrypted connections?

This is Wikipedia. Not a bank. I prefer some security over none.

kgo• 15 years ago

And it looks like it's back up. Total downtime, about two hours.

p858snake• 15 years ago

And it was fixed basically as it broke.

  22:28 Ryan_Lane: restarting apache on singer
  22:19 Ryan_Lane: pushing new star cert to singer
  21:55 RoanKattouw: SSL certificate for secure.wikimedia.org expired about an hour ago, no ops around. I've just texted Ryan

Wikipedia's https certificate expired.

Related Stories