Skip to content

GitLab

  • Menu
Projects Groups Snippets
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in
  • H HTTPS Everywhere EFF
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Issues 251
    • Issues 251
    • List
    • Boards
    • Service Desk
    • Milestones
  • Monitor
    • Monitor
    • Incidents
  • Analytics
    • Analytics
    • Value stream
  • Activity
  • Create a new issue
  • Issue Boards
Collapse sidebar
  • The Tor Project
  • Applications
  • HTTPS Everywhere EFF
  • Issues
  • #11112
Closed
Open
Created Mar 02, 2014 by cypherpunks@cypherpunks

"imgs.xkcd.com uses an invalid security certificate"

The HTTP Everywhere 4.0development.15 ruleset for xkcd rewrites this URL:

http://imgs.xkcd.com/comics/regular_expressions.png

However, in regards to the cert for imgs.xkcd.com, Firefox 27.0.1 on Mac 10.9.2 reports, "The certificate is only valid for the following names: *.voxcdn.com , voxcdn.com".

So, attempting to load the image in Firefox results in a broken image, as Firefox refuses to load the image, with the error "ssl_error_bad_cert_domain".

What happens: broken image What should happen: image should be displayed properly

This bug is particularly ironic because the page at https://www.eff.org/https-everywhere has this link:

[a href="https://www.xkcd.com/208"]clever technology[/a]

which triggers the broken image on that xkcd page.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information
Assignee
Assign to
Time tracking