Re: McAfee's certificate on akamai seems to be invalid

2020-05-07 Thread Brandon Martin

On 5/7/20 12:16 PM, Niels Bakker wrote:
It looks like you shouldn't attempt to access that site over HTTPS, just 
via plain HTTP.  Do you have any official bit of documentation 
that links to the HTTPS version?


Given the prevalence of opportunistic upgrades to TLS these days, I'd 
argue that having a misbehaving server listing on 443 (and accepting SNI 
for a name that works on plain HTTP, if applicable) at the same domain 
as a well-known, public HTTP server, especially from a "security" 
company, is a poor idea.

--
Brandon Martin


Re: McAfee's certificate on akamai seems to be invalid

2020-05-07 Thread Niels Bakker

* drew.wea...@thenap.com (Drew Weaver) [Thu 07 May 2020, 16:50 CEST]:
I contacted their support and CS but if anyone knows someone at 
either organization it appears that the certificate for 
downloadcenter.mcafee.com Is invalid.


Has been this way for a while.


It looks like you shouldn't attempt to access that site over HTTPS, 
just via plain HTTP.  Do you have any official bit of documentation 
that links to the HTTPS version?



-- Niels.


McAfee's certificate on akamai seems to be invalid

2020-05-07 Thread Drew Weaver
I contacted their support and CS but if anyone knows someone at either 
organization it appears that the certificate for downloadcenter.mcafee.com Is 
invalid.

Has been this way for a while.

-Drew