Hacker News new | ask | show | jobs
by opyate 1132 days ago
For the OP:

Warning: Potential Security Risk Ahead

Firefox detected a potential security threat and did not continue to nilsbakker.nl. If you visit this site, attackers could try to steal information like your passwords, emails, or credit card details.

And:

$ curl https://nilsbakker.nl/portfolio/3d-tiles/ curl: (60) SSL certificate problem: self-signed certificate More details here: https://curl.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not establish a secure connection to it. To learn more about this situation and how to fix it, please visit the web page mentioned above. (hf-course-3.9.13)

3 comments

My guess is that it's the proxy responding since the server is going down. I got the same error and when I continued I saw "Your domain name is parked.

Hey owner of nilsbakker.nl Your domain name is not linked to your web hosting package, reseller package or virtual/dedicated server. If you need support in connecting your products, you can contact your provider."

No problems here, it displays as a "Let's encrypt" certificate.
These are the fields on the certificate that's being presented to me:

emailAddress = root@dns-redirect001.axc.nl, CN = dns-redirect001.axc.nl, OU = SomeOrganizationalUnit, O = SomeOrganization, L = SomeCity, ST = SomeState, C = --

A self-signed certificate that expired on 6/11/19, 4:35:46 PM GMT+2

It's probably been taken down.

It works for me (again) but I remember that server domain from my old Versio shared hosting account.

They used to be the typical "dirt cheap, low spec, PHP 5.4" hoster of choice for students and people looking to save a buck, but they've since raised their prices significantly (and I don't think they've raised their quality of service much).

Would not recommend. I wouldn't recommend shared hosting in the first place, but if you do, it's worth looking around for better hosts. There's a good chance you'll be better off with Github pages for hosting websites that you expect any visitors to see.

Github pages is excellent and should be the dev’s go to of choice IMO.
I'm getting an error as well, although not a self-signed error. I'm getting a mismatched domain error.
Probably just depends what order your TLS implementation is deciding to complain about the issues: it's not only self-signed but has no DNS SAN and the CN also mismatches.