| Index | Recent Threads | Unanswered Threads | Who's Active | Guidelines | Search |
 |
World Community Grid Forums
Category: Support
Forum: Website Support
Thread: wcgrid.org security certificate |
| No member browsing this thread |
|
Thread Status: Active Total posts in this thread: 6
|
|
| Author |
|
|
Former Member
Cruncher Joined: May 22, 2018 Post Count: 0 Status: Offline |
I hadn't really noticed that wcgrid.org was a shortened domain name that could be used to get to worldcommunitygrid.org until I noticed it on a snurky signature. However, when I tried it I discovered that it doesn't work well with HTTPS because the security certificate doesn't specify that domain name:
wcgrid.org uses an invalid security certificate. The certificate is only valid for the following names: *.worldcommunitygrid.org, worldcommunitygrid.org Error code: SSL_ERROR_BAD_CERT_DOMAIN With some browsers now pushing people towards HTTPS whenever it's available, shouldn't this be fixed? |
||
|
|
uplinger
Former World Community Grid Tech Joined: May 23, 2005 Post Count: 3952 Status: Offline Project Badges: 
|
Greetings,
We have purchased the domains that are similar to worldcommunitygrid.org to help prevent domain squatting. However we recommend that everyone uses the full domain as it has the certificate associated with World Community Grid. If you use wcgrid.org, it will redirect you to the https://www.worldcommunitygrid.org site. All external usages of wcgrid.org should use http and not https. Thanks, -Uplinger |
||
|
|
Former Member
Cruncher Joined: May 22, 2018 Post Count: 0 Status: Offline |
All external usages of wcgrid.org should use http and not https. That's strange thinking. My version is "The whole web should use https and http should be banned." |
||
|
|
Former Member
Cruncher Joined: May 22, 2018 Post Count: 0 Status: Offline |
All external usages of wcgrid.org should use http and not https. That's strange thinking. My version is "The whole web should use https and http should be banned." External security certs are not free if you want them signed by a trusted source. |
||
|
|
KerSamson
Master Cruncher Switzerland Joined: Jan 29, 2007 Post Count: 1684 Status: Offline Project Badges: 
|
External security certs are not free if you want them signed by a trusted source. What about Let's Encrypt? Cheers, Yves |
||
|
|
uplinger
Former World Community Grid Tech Joined: May 23, 2005 Post Count: 3952 Status: Offline Project Badges:
|
LetsEncrypt is a great service, however, they recommend updating your certificates every 60 days, We have certificates that are valid for 3 years. They are really designed for single server sites and it takes quite a bit of work to correctly setup certificates with load balancers. Also, since this is a production product, we require a higher level of support that LetsEncrypt is not able to provide.
Thanks, -Uplinger |
||
|
|
|