Your cert has expired

  • Thread starter Deleted member 30996
  • Start date
D

Deleted member 30996

Guest
Danger Will Robinson!

DangerWilllRobinson.png
 
Apparently this server is using HTTP Strict Transport Security (HSTS)?

For me (Firefox 69.0.2 32-bit) this meant that I was not able to add an exception.

Hmm, I really don't like this central server certificate approach of HTTPS. Why can it not be more like SSH where you connect once and retain their certificate / public key; if it then changes, you know a potential MITM attack is going on.
I am sure there is a good reason for this, I have never been able to find a good source to read about it.
 
HSTS prevents a man-in-the-middle from downgrading your connection from HTTPS to HTTP. Which could expose your login credentials.

 
I am surprised that the Firefox browser is preventing me from adding an exception. There is nothing that I have read here that says "There is a technical reason why the user cannot continue". I suppose this is purely an artificial limitation implemented by some browsers some of the time?
 
Danger, Will Robinson! Danger!

expired02.png

The cert for download.freebsd.org expired Jan 21, 2020.
 
Back
Top