[arm-allstar] Website Down

[David McGough]

Tony,

I'm not sure how the absence of a DNS-CAA record would cause what you're 
describing?

Try to send another screenshot of the error, if possible?

We (HamVoIP) don't have any content hosted with google, so the
"*.googleusercontent.com" certificate you mention shouldn't even come into
equation. My suspicion is that the "Let's Encrypt" certificate authority
may not be recognized by your browser. This group is fairly new.

73, David KB4FXC


On Fri, 22 Nov 2019, Tony Ross wrote:

> On 11/20/19 5:50 PM, David McGough wrote:
> 
> > I'm not sure about that browser??  If you look at the info about the
> > certificate, what does the browser say??
> >
> > I'm using wildcard certificates from "Let's Encrypt" for hamvoip.org and
> > other hobby-related websites, etc.  Maybe your Android device doesn't
> > recognize the root certificate chain for this issuing group??
> 
> Apparently the screen shot I submitted to the arm-allstar list didn't 
> get published, but essentially the security warning is that the name of 
> the site "hamvoip.org" doesn't match the name on the certificate 
> "*.googleusercontent.com".
> 
> > I just tested the site with the SSL Labs tool and they don't report
> > anything major, for whatever that's worth. See:
> >
> > https://www.ssllabs.com/ssltest/analyze.html?d=hamvoip.org
> 
> It seems that the Android Dolphin browser is reporting the ssllabs.com 
> orange item "DNS-CAAÂ  No (more info)" item.
> 
>