logoalt Hacker News

red369 • today at 1:46 AM • 1 reply • view on HN

Wait, are you saying neverssl.com now sometimes uses SSL?

If this is a joke, it's over my head. If not, I'm not knowledgeable enough in this space to pass judgement, but that would seem crazy to me. Like the owner should consider a domain name change :)


Replies

notpushkin • today at 6:50 AM

It has SSL on the main domain, and some subdomains without SSL (wildcard perhaps?). The main domain (when accessed over SSL?) redirects to a subdomain with plain HTTP.

Kinda weird setup!

Edit: okay, the subdomains also have SSL. I guess the random subdomain thing is to make sure it hasn’t been cached in a “this site has HTTPS” list. The HTTPS is needed, of course, to please the browser makers, as the parent says.