Hacker News Reader

Make sure you run the CLI checks too.

I noticed that Firefox didn't show any connections on that page (good) but when I ran the curl command, it did connect (bad) and I had to update my Ubuntu packages manually to resolve.

View on HN

Well, it's a check of a client, so obviously you have to run the client that you want to check.

In this case, with curl, it's actually a way to check the system root trust store.

Mine hadn't been updated yet. I'm not sure why Firefox was failing the page check but, in some ways, it was a false positive for me.

Browsers also maintain their own CRLs separate from the OS.

Reply on news.ycombinator.com