search

chromium / badssl.com

:lock: Memorable site for testing clients against bad SSL configs.
https://badssl.com
Apache License 2.0
2.81k stars 190 forks source link

Create a subdomain for each mixed content error #154

Open lgarron opened 8 years ago

lgarron commented 8 years ago

https://github.com/lgarron/badssl.com/issues/152#issue-137988831

We already have a lot of these:

april commented 8 years ago

My opinion is that we kill all of them in favor of them just being subdirectories.

lgarron commented 8 years ago

I disagree, because it helps to have the origin reflect the problem if you want to test a specific one of these.

april commented 8 years ago

I don't get how:

https://mixed-script.badssl.com/ is really that much more reflective than https://badssl.com/mixed/script/

How about we have them 301 redirect instead? Then it shouldn't affect any of the existing tests afaik.

lgarron commented 8 years ago

Some UI only shows the current origin/domain.

1) It's very convenient for these UI strings to reinforce what you think you're testing. 2) People seeing these URLs will find them easy to remember and type into different devices and browsers.

screen shot 2016-03-02 at 12 59 38
lgarron commented 8 years ago

I don't know about you, but I often work with random community members and project testers, and I'd like the origin to be as clear as possible.

A lot of the TEST= documentation in our CLs also refers specifically to mixed.badssl.com and mixed-script.badssl.com, and I'd like to avoid breaking those unnecessarily.

april commented 8 years ago

I'm a disagreeable old curmudgeon, and so random community tends to avoid me as much as possible. :P

I honestly don't feel that strongly about this, so we can leave them around if you find it useful.

lgarron commented 8 years ago

Alright, we can figure it out later. I'll hold off on adding any new ones for now.

Hoverbear commented 8 years ago

@marumari Is your complaint more about cluttering the homepage or the configurations?

april commented 8 years ago

The configurations, mostly. It's a single link either way, off the home page. :)