Forgotten ssl certificate for www. subdomain

Site Feedback
1

www. subdomain has missing ssl certificate so firefox gives error like : Websites prove their identity via certificates. Nightly does not trust this site because it uses a certificate that is not valid for www . rubyonrails . org . The certificate is only valid for the following names: api.rubyonrails.org, contributors.rubyonrails.org, edgeapi.rubyonrails.org, edgeguides.rubyonrails.org, guides.rubyonrails.org

sslbug
sslbug1370×1038 94.4 KB

2

I just tried visiting www.rubyonrails.org, and it immediately redirected to prefix-less rubyonrails.org. There are a LOT of sites that do this, by the way, enough that there’s a whole collection of Internet Arguments, pro and con, around it.

Walter

3

hi walter the https:// www page and http:// www pages are completely different 2 pages. Please check screen shots of those 2 websites: https:

Screenshot_20200723-015732
Screenshot_20200723-0157321080×1920 453 KB

http:

Screenshot_20200723-015743
Screenshot_20200723-0157431080×1920 481 KB

4

I can’t replicate your findings here. If I go to http://rubyonrails.org, I get redirected to https://rubyonrails.org, and I see the modern (cartoons) site in either case. How are you able to stay on the old site without being redirected?

Walter

5

Steps : 1- Enter any browser ( whether mobile or desktop ) 2- Enter url as https://www.rubyonrails.org
2.1 - url must be https://www.rubyonrails.org not http://www.rubyonrails.org because that one redirects to https://rubyonrails.org/ 3-Tadaaa (just give temporary permission about lack of ssl certifiate )

6

Wow. That’s a whole other site that I’ve never seen before. I wonder why it is parked at www – that doesn’t seem to have anything to do with the content. Aha. Seems to be a lingering DNS mis-configuration. Here’s the actual address of that page, working correctly in https: https://contributors.rubyonrails.org

Walter

7

Still a problem and for some reason https://www.rubyonrails.org is the top search result rails contributors at DuckDuckGo

8

Permanently redirecting from https://www.rubyonrails.org to https://contributors.rubyonrails.org/ would probably make the search engines link to that instead.

Or the site could return this kind of header

Link: <https://www.example.com/downloads/white-paper.pdf>; rel="canonical"

or in <html><head>

   <link rel="canonical" href="http://www.example.com/page.php?item=purse">

as per RFC 6596: The Canonical Link Relation