Hacker News new | ask | show | jobs
by buro9 4287 days ago
Just tested using the WinXP+IE6 virtual machine from https://www.modern.ie/en-gb/virtualization-tools

Tested against: https://www.buro9.com/ , which is my own domain running behind CloudFlare using their SSL cert (it's a Pro account - my free accounts have not yet been enabled with the free SSL).

IE6 on WinXP accesses this without warning providing CloudFlare Apps are disabled.

If CloudFlare Apps are enabled, then IE6 gives a mixed-content warning but is fine with the SSL cert.

Caveat: This WinXP+IE6 version might not be precisely the same as whatever is in the wild and has never been updated. For reference WinXP is Service Pack 3, and IE6 is 6.0.2900.5512
1 comments
iancarroll 4287 days ago
Pro accounts don't use SNI.
link
buro9 4287 days ago
Right you are.

So a pure SNI test using https://sni.velox.ch/ on IE6 on WinXP does produce a warning dialog, "The name on the security certificate is invalid or does not match the name of the site".

Clicking OK clears it for the remainder of the browser session.

link