Opened 6 years ago

Closed 6 years ago

#11112 closed defect (fixed)

"imgs.xkcd.com uses an invalid security certificate"

Reported by: cypherpunks Owned by: pde
Priority: Medium Milestone: HTTPS-E 4.0dev15
Component: HTTPS Everywhere/EFF-HTTPS Everywhere Version: HTTPS-E 4.0dev14
Severity: Keywords:
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

The HTTP Everywhere 4.0development.15 ruleset for xkcd rewrites this URL:

http://imgs.xkcd.com/comics/regular_expressions.png

However, in regards to the cert for imgs.xkcd.com, Firefox 27.0.1 on Mac 10.9.2 reports, "The certificate is only valid for the following names: *.voxcdn.com , voxcdn.com".

So, attempting to load the image in Firefox results in a broken image, as Firefox refuses to load the image, with the error "ssl_error_bad_cert_domain".

What happens: broken image
What should happen: image should be displayed properly

This bug is particularly ironic because the page at https://www.eff.org/https-everywhere has this link:

[a href="https://www.xkcd.com/208"]clever technologya

which triggers the broken image on that xkcd page.

Child Tickets

Change History (1)

comment:1 Changed 6 years ago by zyan

Resolution: fixed
Status: newclosed

Fixed.

Note: See TracTickets for help on using tickets.