Bug 15378 – dlang.org does not completely work with https:
Status
RESOLVED
Resolution
WORKSFORME
Severity
enhancement
Priority
P1
Component
dlang.org
Product
D
Version
D2
Platform
All
OS
All
Creation time
2015-11-24T17:50:25Z
Last change time
2020-03-21T03:56:40Z
Assigned to
No Owner
Creator
Walter Bright
Comments
Comment #0 by bugzilla — 2015-11-24T17:50:25Z
As reported on the n.g.:
> The forum widget isn't going to work until the forum is also HTTPS with a valid certificate.
> This week's "This Week in D" excerpt on the front page
> Runnable examples on the front page (more so than usual, now they are completely broken)
> Chrome warns saying that dlang connection is encrypted with obsolete cryptography
Comment #1 by code — 2015-11-24T19:02:05Z
There is also a number of issues with the server-side configuration, including vulnerability to known attacks: https://www.ssllabs.com/ssltest/analyze.html?d=dlang.org&hideResults=on
While perhaps not a matter of life and death in the case of dlang.org, it is certainly not good advertisement for D (cf. also the fact that it doesn't even show as "green" on Chrome).
Comment #2 by destructionator — 2015-11-30T17:28:03Z
The whole url bar showing as green is kinda rare, that signifies the extended validation thing. My bank does it but no other site I go to does.
Comment #3 by code — 2015-11-30T20:17:08Z
(In reply to Adam D. Ruppe from comment #2)
> The whole url bar showing as green is kinda rare, that signifies the
> extended validation thing. My bank does it but no other site I go to does.
I'm not talking about extended validation; just about Chrome even showing a lock symbol (which happens to be green, and also causes the https schema part of the URL to be rendered green).
For example, https://www.rust-lang.org/ and https://golang.org/ show up as "secure" in this way on Chrome/OS X, while https://dlang.org does not.