Web Standards & Protocols

2+ day, 14+ hour ago   (716+ words) Chrome stops a page and prints NET::ERR_CERT_COMMON_NAME_INVALID when the name written on a site’s SSL certificate does not match the address you asked for. Most cases trace back to the server. A smaller share come from your own device, a…...

6+ day, 12+ hour ago   (235+ words) Hi. I maintain a library called AutoHttps. It gets a real TLS certificate for your ASP.NET Core app from Let's Encrypt (or any ACME certificate authority) and renews it automatically. You add the package, set three values, and Kestrel…...

1+ week, 3+ day ago   (1587+ words) Most developers use TLS constantly and understand it vaguely, "it's the padlock, it means encrypted," without a clear picture of what's actually happening or, more usefully, what actually breaks and why when a cert issue takes down production. Let me…...

1+ week, 4+ day ago   (511+ words) Wendy Paris | September 1, 2026 In August, PIR announced the 35 finalists of the 2026.ORG Impact Awards, which recognizes individuals and organizations around the world making positive contributions in a handful of specific categories. Each finalist receives $2,500, and this year, honorable mention winners…...

2+ week, 1+ day ago   (877+ words) A Burp Suite certificate in Firefox is what lets the proxy read your HTTPS traffic without throwing security warnings on every page. Firefox keeps its own certificate store instead of using the operating system’s, so importing Burp’s CA certificate here…...

2+ week, 4+ day ago   (439+ words) https://appdirs.com/ At 2:02 AM, everything was working. At 2:03 AM, users started receiving connection errors. The servers were running. CPU and memory were …...

2+ week, 4+ day ago   (327+ words) The Iranian regime has established a sophisticated system of digital blockades, surveillance and censorship. Experts believe that it cooperates to this end with the Chinese government and uses technologies supplied by Chinese state-owned firms. This would certainly tie in very…...

2+ week, 4+ day ago   (330+ words) Runbooks still say "renew the SSL certificate" when the browser warning is obsolete protocol. The certificate can be brand new. The tunnel is still TLS 1.0. This is a shortened English note. The tables, handshake diagram, and OpenSSL CLI checks live…...

2+ week, 5+ day ago   (727+ words) The certificate is real. It's signed by a genuine CA, it's nowhere near expiry, and the chain is complete. And the browser still slams the door: This is a different failure from the two it's most often confused with. It…...

2+ week, 5+ day ago   (260+ words) RDAP introduced structured JSON formatting, secure transport layers, and standardized query syntax. From an engineering standpoint, it was a triumph. Yet, RDAP hit a hard ceiling when deployed globally, exposing a fundamental limitation of the IETF’s mandate: protocols can dictate…...