Andy1999
V2EX  ›  问与答

连续两天收到中间人威胁警告邮件

  •  
  •   Andy1999 · Nov 20, 2015 via iPhone · 3137 views
    This topic created in 3825 days ago, the information mentioned may be changed or developed.
    两封来自 Fastly ,他们提示我的证书匹配不上,而且好像很急的样子。我没去理他,第三封说了以下内容 Hello,

    We're writing because we haven't received a reply from you regarding our earlier message.

    This is an urgent update regarding your services that requires your action. We want to be sure you have time to update your service before the issue is communicated to a wider audience.

    Please let us know that you have received this message and are in the process implementing corrections.
    As always, we're available to help with any configuration questions you may have.

    Thanks,
    Kami
    Fastly Customer Support

    这到底是怎么回事,刚才谷歌也来邮件了提示 SSL 证书可能错误。

    看了一下自己的域名完全是 OK 的,误报还是怎么回事?
    13 replies    2015-11-24 18:08:01 +08:00
    JM1212
        1
    JM1212  
       Nov 20, 2015
    Andy1999
        2
    Andy1999  
    OP
       Nov 20, 2015 via iPhone
    @JM1212 检查出来没问题
    msg7086
        3
    msg7086  
       Nov 20, 2015
    Kami
    Fastly Customer Support

    来自神的旨意(中二度爆表
    Andy1999
        4
    Andy1999  
    OP
       Nov 20, 2015 via iPhone
    @msg7086 所以按照 V 友推测是发生了什么呢?而且是海外中间人排除了政府
    msg7086
        5
    msg7086  
       Nov 21, 2015
    谁知道呢。回个信问问情况很难吗。
    Andy1999
        6
    Andy1999  
    OP
       Nov 21, 2015 via iPhone
    @msg7086 很难 因为我压根没发现问题
    Perry
        7
    Perry  
       Nov 21, 2015 via iPhone
    至少应该回信说你尝试处理,或者直接和他们说你不知道问题出在哪里
    Perry
        8
    Perry  
       Nov 21, 2015 via iPhone
    还有哪里看出来是威胁。。
    dndx
        9
    dndx  
       Nov 21, 2015
    是不是说从 CDN 到你的源站之间被 MITM 了?

    如果是的话这个问题显然比较严重,一般只有 ISP 级别的才有能力在这种尺度上 MITM 。
    Andy1999
        10
    Andy1999  
    OP
       Nov 21, 2015 via iPhone
    @dndx 没错 就是 CDN 到源站之间
    Fastly 有一个 TLS 证书检测
    dndx
        11
    dndx  
       Nov 21, 2015
    @Andy1999 如果确认服务器设置没有问题建议跟 Fastly 联系检查是否被人针对性 MITM 了。
    wbsdty331
        12
    wbsdty331  
       Nov 21, 2015
    都是共产党惹的祸
    别查我的水表(
    FreeDog
        13
    FreeDog  
       Nov 24, 2015
    Google 也给我发邮件说证书与域名不匹配,然而怎么测试都是匹配的... 应该忽略即可
    About   ·   Help   ·   Advertise   ·   Blog   ·   API   ·   FAQ   ·   Solana   ·   6144 Online   Highest 6679   ·     Select Language
    创意工作者们的社区
    World is powered by solitude
    VERSION: 3.9.8.5 · 68ms · UTC 02:04 · PVG 10:04 · LAX 19:04 · JFK 22:04
    ♥ Do have faith in what you're doing.