Re: HSTS and expired cert: our site is down for now

Fernando Mumbach <[email protected]> Sun, 9 Apr 2017 19:57:12 -0300
Newsgroups gmane.network.freenet.devel
Message-ID <[email protected]>
Hello,

downloads.freenetproject.org is still using the old cert, and the 
archlinux package fails to update because the cert is invalid.
Did you maybe forgot to also update the subdomain? The subdomain "wiki" 
works okay for me (it redirects correctly to github).
I do not know of others subdomains, but we should test all the domains.


On 05-04-2017 20:35, Arne Babenhauserheide wrote:
> Hi,
>
> The certificate expired and we use HTTP Strict Transport Security
> (HSTS). That means: Our old site is down until the DNS can be switched
> over to the AWS site.
>
> Let’s treat this as a test of what would happen if an attacker were to
> take down our clearnet infrastructure.
>
> Best wishes,
> Arne
> --
> Unpolitisch sein
> heißt politisch sein
> ohne es zu merken