Hacker News Reader

Comment by recursive | Hacker News Reader

I'm getting a cert error. Subject is *.fortinet.com, not nega.radioac.dev.

Edit, the second: Disregard. It's definitely a corporate middlebox on my end.

fortinet is a cyber security software company, that makes a product called fortigate that does SSL MITM to decrypt and monitor/filter your traffic. Probably want to poke your IT team or get very concerned about your ISP...

Maybe you're behind a firewall with some filtering, and it doesn't like the domain name or something? browsers treat '.dev' domains a bit more strictly than the norm, so the browser doesn't like the redirect?? that's just my guess sorry.

Can you elaborate on how browsers treat .dev differently? its the first im hearing of this and it sounds interesting, thx.

The entire TLD is on the HSTS preload list, so .dev domains are only accessible via HTTPS. You can't use them unencrypted.

My guess is that some corporate filter blocked it because of the "nega" subdomain. Kind of sounds like the racial slur.

Edit: it doesn't help that the domain is `radioac.dev`. So *NEGA.R*adioc.dev

Nah. It's in the Fortiguard category "Newly Observed Domain". So, it hasn't been classified yet, and that person's corporate filter was setup to block those pages.

Wouldn't that be a ridiculously dumb heuristic to employ?

Who ever said corporate IT was smart?

Another view of it: Someone in Management sent a message something like "Stop pointing me to the Scunthorpe Problem wikipedia page[1], just block all these sites" directive and this was the easiest way to resolve it permanently.

[1] https://en.wikipedia.org/wiki/Scunthorpe_problem

Maybe because it’s close to ‘mega’ and all those variants of what used to be mega upload are like whackamole.

Works for me.

Hey, get back to work!

- your boss

Reply on news.ycombinator.com