21 Jan
2018
21 Jan
'18
11:46 a.m.
Not sure how github handles domain forwarding for https but here's the
error from firefox.
buildyourowninter.net uses an invalid security certificate.
The certificate is only valid for the following names:
*.github.com, github.com, *.github.io, github.io
Error code: SSL_ERROR_BAD_CERT_DOMAIN
21 Jan
21 Jan
12:05 p.m.
Github Pages doesn't support https on custom domains .
so, http://buildyourowninter.net is ok, but https://buildyourowninter.n
et is not.
also, https://buildyourowninternet.github.io redirects to http://buildy
ourowninter.net .
Alternatives I can think of - host via for "free" cloudflare or self-
host.
What would you prefer?
On Sun, 2018-01-21 at 11:46 -0800, Morgan Allen wrote:
> Not sure how github handles domain forwarding for
https but here's
the error from firefox.
buildyourowninter.net uses an invalid security certificate.
The certificate is only valid for the following names:
*.github.com, github.com, *.github.io, github.io
Error code: SSL_ERROR_BAD_CERT_DOMAIN
_______________________________________________
mesh mailing list
mesh(a)lists.sudoroom.org
https://sudoroom.org/lists/listinfo/mesh
12:10 p.m.
Hi!
Gitlab.com supports custom HTTPS domains.
Mitar
Github Pages doesn't support https on custom
domains .
so, http://buildyourowninter.net is ok, but https://buildyourowninter.n
et is not.
also, https://buildyourowninternet.github.io redirects to http://buildy
ourowninter.net .
Alternatives I can think of - host via for "free" cloudflare or self-
host.
What would you prefer?
On Sun, 2018-01-21 at 11:46 -0800, Morgan Allen wrote:
--
http://mitar.tnode.com/
https://twitter.com/mitar_m
> Not sure how github handles domain forwarding
for https but here's
the error from firefox.
buildyourowninter.net uses an invalid security certificate.
The certificate is only valid for the following names:
*.github.com, github.com, *.github.io, github.io
Error code: SSL_ERROR_BAD_CERT_DOMAIN
_______________________________________________
mesh mailing list
mesh(a)lists.sudoroom.org
https://sudoroom.org/lists/listinfo/mesh
_______________________________________________
mesh mailing list
mesh(a)lists.sudoroom.org
https://sudoroom.org/lists/listinfo/mesh
12:17 p.m.
Our sudomesh digital ocean droplet also supports HTTPS.
Sierk
On Sun, Jan 21, 2018 at 12:10 PM, Mitar <mitar(a)tnode.com> wrote:
Hi!
Gitlab.com supports custom HTTPS domains.
Mitar
Github Pages doesn't support https on custom
domains .
so, http://buildyourowninter.net is ok, but https://buildyourowninter.n
et is not.
also, https://buildyourowninternet.github.io redirects to http://buildy
ourowninter.net .
Alternatives I can think of - host via for "free" cloudflare or self-
host.
What would you prefer?
On Sun, 2018-01-21 at 11:46 -0800, Morgan Allen wrote:
--
http://mitar.tnode.com/
https://twitter.com/mitar_m
_______________________________________________
mesh mailing list
mesh(a)lists.sudoroom.org
https://sudoroom.org/lists/listinfo/mesh
> Not sure how github handles domain forwarding
for https but here's
the error from firefox.
buildyourowninter.net uses an invalid security certificate.
The certificate is only valid for the following names:
*.github.com, github.com, *.github.io, github.io
Error code: SSL_ERROR_BAD_CERT_DOMAIN
_______________________________________________
mesh mailing list
mesh(a)lists.sudoroom.org
https://sudoroom.org/lists/listinfo/mesh
_______________________________________________
mesh mailing list
mesh(a)lists.sudoroom.org
https://sudoroom.org/lists/listinfo/mesh
1:47 p.m.
Cool, sounds like there's plenty of options.
Would anyone on the list like to set this up? I'd be able to do it, but
it might be a while.
The repo is at https://github.com/buildyourowninternet/buildyourowninte
rnet.github.io .
On Sun, 2018-01-21 at 12:17 -0800, Sierk wrote:
--
http://mitar.tnode.com/
https://twitter.com/mitar_m
_______________________________________________
mesh mailing list
mesh(a)lists.sudoroom.org
https://sudoroom.org/lists/listinfo/mesh
Our sudomesh digital ocean droplet also supports
HTTPS.
Sierk
> On Sun, Jan 21, 2018 at 12:10 PM, Mitar <mitar(a)tnode.com> wrote:
> Hi!
>
>
> Gitlab.com supports custom HTTPS domains.
>
>
>
>
>
> Mitar
>
>
>
> > Github Pages doesn't support https on custom domains .
>
> >
>
> > > > > > so, http://buildyourowninter.net is ok, but
https://buildyourowni
nter.n
>
> > et is not.
>
> > > > > > also, https://buildyourowninternet.github.io redirects to
http://
buildy
>
> > ourowninter.net .
>
> >
>
> > > > Alternatives I can think of - host via for "free"
cloudflare or
self-
>
> > host.
>
> >
>
> > What would you prefer?
>
> >
>
> > On Sun, 2018-01-21 at 11:46 -0800, Morgan Allen wrote:
>
> > > >>> Not sure how github handles domain forwarding for https but
here's
the error from firefox.
>
> buildyourowninter.net uses an invalid
security certificate.
>
> The certificate is only valid for the
following names:
> *.github.com, github.com, *.github.io,
github.io
>
> Error code: SSL_ERROR_BAD_CERT_DOMAIN
>
>
>
_______________________________________________
> mesh mailing list
> mesh(a)lists.sudoroom.org
_______________________________________________
mesh mailing list
mesh(a)lists.sudoroom.org
1:53 p.m.
I tried to do it yesterday evening, mostly things are set up on digital
ocean. But eventually I got stuck because my gandi.net account invitation
had expired (needed to adjust dns records).
Sierk
On Sun, Jan 21, 2018 at 1:47 PM, Jorrit Poelen <jhpoelen(a)xs4all.nl> wrote:
Cool, sounds like there's plenty of options.
Would anyone on the list like to set this up? I'd be able to do it, but it
might be a while.
The repo is at https://github.com/buildyourowninternet/
buildyourowninternet.github.io .
On Sun, 2018-01-21 at 12:17 -0800, Sierk wrote:
Our sudomesh digital ocean droplet also supports HTTPS.
Sierk
On Sun, Jan 21, 2018 at 12:10 PM, Mitar <mitar(a)tnode.com> wrote:
Hi!
Gitlab.com supports custom HTTPS domains.
Mitar
Github Pages doesn't support https on custom
domains .
so, http://buildyourowninter.net is ok, but https://buildyourowninter.n
et is not.
also, https://buildyourowninternet.github.io redirects to http://buildy
ourowninter.net .
Alternatives I can think of - host via for "free" cloudflare or self-
host.
What would you prefer?
On Sun, 2018-01-21 at 11:46 -0800, Morgan Allen wrote:
--
http://mitar.tnode.com/
https://twitter.com/mitar_m
_______________________________________________
mesh mailing list
mesh(a)lists.sudoroom.org
https://sudoroom.org/lists/listinfo/mesh
_______________________________________________
mesh mailing list
mesh(a)lists.sudoroom.org
https://sudoroom.org/lists/listinfo/mesh
> Not sure how github handles domain forwarding
for https but here's
the error from firefox.
buildyourowninter.net uses an invalid security certificate.
The certificate is only valid for the following names:
*.github.com, github.com, *.github.io, github.io
Error code: SSL_ERROR_BAD_CERT_DOMAIN
_______________________________________________
mesh mailing list
mesh(a)lists.sudoroom.org
https://sudoroom.org/lists/listinfo/mesh
_______________________________________________
mesh mailing list
mesh(a)lists.sudoroom.org
https://sudoroom.org/lists/listinfo/mesh
1:55 p.m.
I can't seem to find the documentation for custom domains on GitHub Pages.
On the other hand, CloudFlare doesn't support custom reverse proxy URLs,
but rather proxies the Host request header directly to the server. We
can't use it in front GitHub Pages unless we are willing to have it
reverse proxy the unsecured HTTP origin. Granted this is better having
visitors visit our HTTP site, as CloudFlare and GitHub are likely both
on the same Internet exchanges and should be less prune to MITM attacks,
but at the end of the day it is still delusional HTTPS.
Howard
Jorrit Poelen:
Cool, sounds like there's plenty of options.
Would anyone on the list like to set this up? I'd be able to do it, but
it might be a while.
The repo is at https://github.com/buildyourowninternet/buildyourowninte
rnet.github.io .
7:29 p.m.
Github instructions are over here.
https://help.github.com/articles/quick-start-setting-up-a-custom-domain/
I would also recommend Cloudflare approach (I work there). Makes it pretty convenient to
enforce things like dns and caching. You can actually have cloudflare talk to github over
https using the “Full” but not the “Full (strict)” setting. This makes sure there is TLS
at the origin connection but does not verify the certificates.
On Jan 21, 2018, at 3:55 PM, Howard Xiao
<x(a)dargsia.org> wrote:
I can't seem to find the documentation for custom domains on GitHub Pages.
On the other hand, CloudFlare doesn't support custom reverse proxy URLs,
but rather proxies the Host request header directly to the server. We
can't use it in front GitHub Pages unless we are willing to have it
reverse proxy the unsecured HTTP origin. Granted this is better having
visitors visit our HTTP site, as CloudFlare and GitHub are likely both
on the same Internet exchanges and should be less prune to MITM attacks,
but at the end of the day it is still delusional HTTPS.
Howard
Jorrit Poelen:
Cool, sounds like there's plenty of options.
Would anyone on the list like to set this up? I'd be able to do it, but
it might be a while.
The repo is at https://github.com/buildyourowninternet/buildyourowninte
rnet.github.io .
_______________________________________________
mesh mailing list
mesh(a)lists.sudoroom.org
https://sudoroom.org/lists/listinfo/mesh 
22 Jan
22 Jan
10:23 a.m.
On 2018-01-21 21:29, Tevfik Renan Dincer wrote:
I would also recommend Cloudflare approach (I work
there). Makes it
pretty convenient to enforce things like dns and caching. You can
actually have cloudflare talk to github over https using the “Full”
but not the “Full (strict)” setting. This makes sure there is TLS at
the origin connection but does not verify the certificates.
Forgive my ignorance, but is this something that is hidden from the
browser (ie. the browser only sees buildyourowninter.net resources) or
does the browser have to explicitly request resources from cloudflare?
I am only asking in the context of this particular website; in general,
I know that cloudflare domain does leak into the set of resources needed
by the browser for many websites, and when that happens I stop using
that website :-( . I have to do that to keep my domain based
protections at all meaningful. (Currently that is uBlock Origin but it
applies equally to many other similar extensions.)
So I will vote strongly against any solution which has such
consequences. Again, this is just in the context of
buildyourowninter.net ; I don't want to start a flamewar about
cloudflare or cloud usage in general.
Thanks.
--
Please don't Cc: me privately on mailing lists and Usenet,
if you also post the followup to the list or newsgroup.
To reply privately _only_ on Usenet, fetch the TXT record for the domain.
23 Jan
23 Jan
9:20 a.m.
hey y'all -
Just to let you know - someone is working on a fix, and waiting for dns
changes to propagate. If you'd like to help out, please contact me
directly, and I'll forward you to the person working on it.
Hopefully, we'll sort out this thing sooner rather than later.
Thanks for all the suggestions!
-jorrit
On Mon, 2018-01-22 at 10:23 -0800, Ian Zimmerman wrote:
or
On 2018-01-21 21:29, Tevfik Renan Dincer wrote:
> I would also recommend Cloudflare approach (I work there). Makes it
> pretty convenient to enforce things like dns and caching. You can
> actually have cloudflare talk to github over https using the “Full”
> > > but not the “Full (strict)” setting. This makes sure there is TLS
at
the origin
connection but does not verify the certificates.
Forgive my ignorance, but is this something that is hidden from the
> browser (ie. the browser only sees buildyourowninter.net resources) > does the browser have to explicitly request
resources from
cloudflare?
> I am only asking in the context of this particular website; in
general,
> I know that cloudflare domain does leak into the
set of resources
needed
by the browser for many websites, and when that
happens I stop using
that website :-( . I have to do that to keep my domain based
> protections at all meaningful. (Currently that is uBlock Origin but
it
applies equally to many other similar extensions.)
So I will vote strongly against any solution which has such
consequences. Again, this is just in the context of
buildyourowninter.net ; I don't want to start a flamewar about
cloudflare or cloud usage in general.
Thanks.
3:03 p.m.
BuildYouOwnInter.net is now deployed on the Sudo Mesh webserver.
https://buildyourowninter.net should work now!
On Tue, Jan 23, 2018 at 9:20 AM, Jorrit Poelen <jhpoelen(a)xs4all.nl> wrote:
hey y'all -
Just to let you know - someone is working on a fix, and waiting for dns
changes to propagate. If you'd like to help out, please contact me
directly, and I'll forward you to the person working on it.
Hopefully, we'll sort out this thing sooner rather than later.
Thanks for all the suggestions!
-jorrit
On Mon, 2018-01-22 at 10:23 -0800, Ian Zimmerman wrote:
On 2018-01-21 21:29, Tevfik Renan Dincer wrote:
I would also recommend Cloudflare approach (I work there). Makes it
pretty convenient to enforce things like dns and caching. You can
actually have cloudflare talk to github over https using the “Full”
but not the “Full (strict)” setting. This makes sure there is TLS at
the origin connection but does not verify the certificates.
Forgive my ignorance, but is this something that is hidden from the
browser (ie. the browser only sees buildyourowninter.net resources) or
does the browser have to explicitly request resources from cloudflare?
I am only asking in the context of this particular website; in general,
I know that cloudflare domain does leak into the set of resources needed
by the browser for many websites, and when that happens I stop using
that website :-( . I have to do that to keep my domain based
protections at all meaningful. (Currently that is uBlock Origin but it
applies equally to many other similar extensions.)
So I will vote strongly against any solution which has such
consequences. Again, this is just in the context ofbuildyourowninter.net ; I don't
want to start a flamewar about
cloudflare or cloud usage in general.
Thanks.
_______________________________________________
mesh mailing list
mesh(a)lists.sudoroom.org
https://sudoroom.org/lists/listinfo/mesh
2410
days inactive
2412
days old
10 comments
7 participants
participants (7)
-
Howard Xiao -
Ian Zimmerman -
Jorrit Poelen -
Mitar -
Morgan Allen -
Sierk -
Tevfik Renan Dincer