-
Notifications
You must be signed in to change notification settings - Fork 1.1k
Conversation
Could you also search for subdomains? |
There are a lot of domains in the cert for the mainpage, will take a while to see if they are even used on the web. |
You can use Google to search for subdomains, even those that have no or a different cert. |
|
||
¹ Redirect to HTTP | ||
Non-resolvable host: | ||
- static.freundeskreis.einslive.de |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
If a host is not resolvable (=> does not exist) you don't need to list it.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
It is part of the SAN part of the certificate for www.wdr.de so for the sake of completeness i noted that
Non-resolvable host: | ||
- static.freundeskreis.einslive.de | ||
|
||
Redirect to plain on: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
plain
is not accurate, please use 'http' or 'plain http'.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
will be changed
So this rule needs either exclusions or spitted into a |
added |
trigger Travis again |
rest of the hosts from the SAN of the main certificate are omitted for now
There are small mixed content warnings but as far as i can tell the site doesn't break with the missing css.
Videos seem to work fine too.