Meta @sopuli.xyz nocturne @sopuli.xyz 2 mo. ago

This Connection Is Not Private

I sent a sopuli link to my wife tonight and she sent this back to me.

12 comments

There is no "www" in the sopuli URL.

That's a subdomain. It also works, but it apparently doesn't have a HTTPS cert.

Remove the "www" and the HTTPS encryption will work just fine.
- Remove the “www” and the HTTPS encryption will work just fine.
  
  Technically speaking, the encryption itself works just fine with wrong domain too, but as it's not listed on certificate it's not valid for www.sopuli.xyz domain.
- Some time after going to sopuli.xyz on Firefox on my laptop and sharing the link to my wife the www was injected. I copied the address in Firefox’s address bar and pasted that into telegram. Which she then clicked that link on her phone.
  
  That shouldn't happen.
  
  The "www" in a URL isn't just random. It either isn't part of a websites address, or it is. Whether it works, or redirects to something that works, is up to any given website.
  
  Some don't work at all if you add it when it's not supposed to be there.
Apple is so annoying for not even letting you visit a site with an outdated certificate. (I'm assuming that's what caused the warning)

I still want to see the page, it's unlikely that someone is faking the data... A warning not to enter private data should be enough, right?
- It’s not just Apple. Basically all modern browsers yell at you for trying this, and there is almost always an override.
  
  That's a good thing but I know that Firefox has a proceed anyway button. Which Safari didn't have when I encountered the issue. (Maybe it's a different config)
- Isn't there a button when you click on "Show Details?"
  
  Yes, if you show details you can then choose to see the site.

You've viewed 12 comments.