On: Tell HN: Sci-Hub's TLS certificate has started failing

[ItsMe000001]

I just tried https://sci-hub.tw/ (Chrome) and got a secure connection without warnings. Since the issuer of the certificate that my browser showed for the connection is "Comodo" I guess the revocation didn't reach my browser yet?

EDIT:

IE and Firefox say "insecure".

What really annoys me: There does not seem to be any way - none that I could find - to get IE and Firefox to connect anyway?

[detaro → ItsMe000001]

AFAIK Chrome doesn't check the CA revocation lists (but instead an aggregation of them by Google), so it doesn't know yet the cert is "bad".

[a_bonobo → ItsMe000001]

On sci-hub.hk I get a non-SSL connection, if I try the 'trick' of http://journal_name.springer.com.sci-hub.hk/path/to?article I get the revoked SSL certificate

Firefox 59

[icebraining → ItsMe000001]

There does not seem to be any way - none that I could find - to get IE and Firefox to connect anyway?

In Firefox, I think you can only by disabling the check (Preferences → Advanced → Certificates → Query OCSP ...). You probably don't want to keep that disabled, though.

[tialaramex → icebraining]

It's fairly marginal, which is why it's switched off in Chrome. To get acceptable performance in the real world they have to soft fail. But that means most bad guys would just force it to fail and then it treats that as OK. So it's a seat-belt that snaps if there's a sudden impact. Not great.