[184505] in North American Network Operators' Group
Re: [outages] Akamai Cert Issues today
daemon@ATHENA.MIT.EDU (Jay Ashworth)
Sun Oct 4 14:42:17 2015
X-Original-To: nanog@nanog.org
Date: Sun, 4 Oct 2015 14:42:05 -0400 (EDT)
From: Jay Ashworth <jra@baylink.com>
To: NANOG <nanog@nanog.org>
In-Reply-To: <96e90bcc6ee5c8d24455f58163e039ee@coolhandluke.org>
Errors-To: nanog-bounces@nanog.org
----- Original Message -----
> From: "coolhandluke via Outages" <outages@outages.org>
> > -We're wondering what happened yesterday to break all these
> > disparate
> > websites
> note that this is *by design*, as sean pointed out.
>
> the "fix" is simple: don't use https on www.irs.gov. any ssl pages
> served by the irs as served on different hostnames.
>
> as to why your users just started it, nfi. my best guess is that they
> weren't using https previously.
Well, "more people may be using HTTPS-Anywhere" may have something to
do with it.
Or, it might be that some new browser release just enabled HTTP/2.0, which
in many implementations *requires* SSL and might also trip this, as noted
in a posting on the topic which I just inadvertantly posted to this same
mailing list 5 minutes ago. :-)
Cheers,
-- jra
--
Jay R. Ashworth Baylink jra@baylink.com
Designer The Things I Think RFC 2100
Ashworth & Associates http://www.bcp38.info 2000 Land Rover DII
St Petersburg FL USA BCP38: Ask For It By Name! +1 727 647 1274
