Don’t settle for awful when you can be god-awful.
@obfuscated who can say! The answer is probably to send more money to “Bob” of course.
@onan always but it might an issue with the SSL/TLS certificate
@obfuscated @onan Clicking up by the URL in Chrome I see a red triangle and "Your connection to this site is not fully secure", and "You should not enter any sensitive information on this site (for example, passwords or credit cards)"
It's valid from Oct 19th 2026 to Jan 17th 2027, the key is a valid 384-bit ECC key. From Let's Encrypt, so no "the key is 4" nonsense.
Qualys gives the site an "A". Only running TLS v1.2 & v1.3 with quantum-safe crypto:
https://www.ssllabs.com/ssltest/analyze.html?d=subgenius.com
@obfuscated @onan I don't see why Chrome wouldn't like it. Firefox doesn't complain.
DNS isn't supporting DNSSEC, but I haven't heard of Chrome complaining about that.
Ahah!
There are NO security policy headers, test at:
https://securityheaders.com/?q=subgenius.com&followRedirects=on
Good certificate & related settings, lacking security headers in server configuration. Ask hosting why that is.
@onan ;
mmm, sacrilicious…
Oh, oops; I thought you said "god-waffle"
@onan I'm getting an error when trying to view it from behind a firewall.. from my phone no problem