HTTPS support for geo DNS mirrors

[email protected] (Michael Fincham) Thu, 6 Aug 2015 11:48:50 +1200

Newsgroups	php.mirrors
Message-ID	<[email protected]>

Hi all,

(apologies if this has been discussed already, I couldn't find existing discussion of it)

We operate the nz2.php.net mirror, which I believe is currently the main New Zealand mirror, with the shutting-down of nz1 a few months ago.

Furthermore, since the geo DNS changes in January we're now serving up www.php.net for NZ clients.

I've just had a member of the public approach me regarding a certificate error on www.php.net. As it stands the only valid name on the certificate we serve up is the canonical name of our mirror service: mirrors.catalyst.net.nz, and this has caused a warning dialog to show in their browser.

Given that a Google search for "php" produces an https://www.php.net/ link as the top result, has any consideration been given to making the TLS situation better with geo DNS? A survey of some of the other mirror sites seems to suggest nobody has a cert for which 'www.php.net.nz' is valid, and some don't support HTTPS at all.

-- 
Michael Fincham, Senior Systems and Network Administrator
Catalyst.net.nz
Phone:+64 4 499 2267

signature.asc (application/pgp-signature, 819 B)