<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#ffffff">
OK, here's what happened. I have opendns set to block social
networking sites. Twitter is blocked, being in that category. So, if
I were to type in twitter.com, the browser would be redirected to a
landing page saying this site is not allowed on this network, etc.
However, the link that was provided was an https link. So, you try to
go to twitter. Behind the scenes, it's redirected to opendns. Then,
Firefox complains because their security certificate belongs to opendns
and not twitter. When I took the "S" off the https, I got the landing
page I would have expected. When I went in and unblocked twitter,
everything worked. However, that error message had me going for a
while, scratching my head.<br>
<br>
I've used opendns for years without much problem. It's good for
limiting what your teenager can do.<br>
<br>
Ron<br>
<br>
On 02/04/2011 10:35 AM, Michael B. Trausch wrote:
<blockquote cite="mid:1296833724.8916.12.camel@aloe" type="cite">
<pre wrap="">On Fri, 2011-02-04 at 10:28 -0500, Ron Frazier wrote:
</pre>
<blockquote type="cite">
<pre wrap="">That link gives me a "This connection is untrusted" warning in Firefox
with the following text:
twitter.com uses an invalid security certificate.
The certificate is only valid for the following names:
*.opendns.com , opendns.com
</pre>
</blockquote>
<pre wrap="">
Now that is interesting.
Given that OpenDNS and Twitter have nothing to do with each other, this
can only happen because of a problem either on your system/network or
with OpenDNS. Perhaps OpenDNS failed to resolve twitter.com and
attempted to take you to one of their "let's help you" pages?
I used to use them, but I was pretty displeased; it failed too
frequently and the whole point was to get something that sucked less
than Comcast's DNS servers (though Comcast has vastly improved the
availability and responsiveness of their DNS servers in the past several
years, from what I hear). I moved to 4.2.2.1 and 4.2.2.2 (the DNS
servers run by Level 3 Communications). Lots of people have said good
things about the Google DNS servers, but I've never had need to use
them.
Now, I'm running BIND on my network, and it is my primary DNS server for
all my zones and also performs the role of being a caching recursive
name server for the rest of my network. I've had much better network
performance since I went and did that.
</pre>
<blockquote type="cite">
<pre wrap="">I do use OpenDNS as my DNS service, but I'm not sure why this is
happening. Also, it's a good idea to give a preview when using an URL
shortener (your first message) so people know where they're going
before they click.
</pre>
</blockquote>
<pre wrap="">
You can always force the URL shortener to preview the link for you ---
every URL shortener has a different way of doing it, of course, but it's
possible for all of them that I am aware of.
--- Mike
</pre>
<pre wrap="">
<fieldset class="mimeAttachmentHeader"></fieldset>
_______________________________________________
Ale mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Ale@ale.org">Ale@ale.org</a>
<a class="moz-txt-link-freetext" href="http://mail.ale.org/mailman/listinfo/ale">http://mail.ale.org/mailman/listinfo/ale</a>
See JOBS, ANNOUNCE and SCHOOLS lists at
<a class="moz-txt-link-freetext" href="http://mail.ale.org/mailman/listinfo">http://mail.ale.org/mailman/listinfo</a>
</pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
(PS - If you email me and don't get a quick response, you might want to
call on the phone. I get about 300 emails per day from alternate energy
mailing lists and such. I don't always see new messages very quickly.)
Ron Frazier
770-205-9422 (O) Leave a message.
linuxdude AT c3energy.com
</pre>
</body>
</html>