[HTTPS-E Rulesets] OpenDNS - system.opendns.com expired

[Christopher Liu]

Mr. Schoen, Mr. Carpenter et al.,

I apologize for not raising this issue directly on the OpenDNS forums
(forums.opendns.com), but I was not registered there and was too lazy
to do so on short notice.
The main reason I sent this email to the https-everywhere-rules list
was the existence of the second issue with info.opendns.com. (Has
anyone managed to reproduce that?)

Could you clarify what you meant by "part of a larger issue"? If you
meant my general reluctance to conduct tech evangelism, or any other
such behavioral issue, I promise to do my best to fix that right away.
However, keep in mind that I really am busy in real life.

All in all, thank you for your prompt reply.

C. Liu

On Thu, Sep 13, 2012 at 10:52 AM, Seth David Schoen <schoen at eff.org> wrote:
> Christopher Liu writes:
>
>> To whom it may concern:
>>
>> The certificate used by system.opendns.com has expired, even though
>> all other OpenDNS domains are fine. It would have been a few days ago
>> (9/5 according to
>> https://forums.opendns.com/comments.php?DiscussionID=15617&page=1#Item_0
>> ) that all the certs were due to expire; not sure why they didn't
>> renew the one for system.
>> The coverage of system.opendns.com should be moved to a separate
>> ruleset which is default_off, and it should be excluded from the main
>> ruleset, at least temporarily.
>
> This is part of a larger issue, but I think in this situation you would
> often be able to get the site operator itself to act faster than we'll
> issue a new release.  In this case, the site operator is a technically
> sophisticated company that probably let the cert expire by accident, and
> if you could find the right person to tell about it, they might be able
> to get the problem fixed with a day or so.
>
> --
> Seth Schoen  <schoen at eff.org>
> Senior Staff Technologist                       https://www.eff.org/
> Electronic Frontier Foundation                  https://www.eff.org/join
> 454 Shotwell Street, San Francisco, CA  94110   +1 415 436 9333 x107