Hacker News new | ask | show | jobs
by ChristopherDrum 40 days ago
Author here. This is strange, as I only use the Ghost site itself for hosting. I don't do any self-hosting or anything. Until this week, I'd never heard of anyone having troubles, but over on Reddit I saw a long-time reader getting some kind of SSL error, then later it said the site "wasn't available". Now in that thread someone else is getting that "phishing" error.

Time to get ahold of Ghost tech support and see what's going on. Sorry for the troubles!

1 comments

The SSL error is likely from visitors on networks that use network-level blocking of domains that have been flagged as malicious. When visiting such a site over unencrypted HTTP you get redirected to an error page that explains the problem, but of course the network can't do this over HTTPS (by design), so you instead just get an opaque protocol error. (The specifics of the error message actually lead me to suspect that they might just be shoving the HTTP error-page response into the HTTPS connection, never mind that it's the wrong protocol.)

It's possible that putting your site behind Cloudflare and enabling Encrypted Client Hello might fix this, though I haven't tested it.