Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[DOCS] Archived npm/npm repo still points to npm.community; redirect has bad cert #6194

Closed
2 tasks done
thw0rted opened this issue Feb 23, 2023 · 2 comments
Closed
2 tasks done
Labels
Documentation documentation related issue Needs Triage needs review for next steps

Comments

@thw0rted
Copy link

Is there an existing issue for this?

  • I have searched the existing issues

This is a CLI Docs Problem, not another kind of Docs Problem.

  • This is a CLI Docs Problem.

Description of Problem

The archived npm repo prominently links to http://npm.community/ in several places. This domain now redirects to npmjs.com -- reasonable people can disagree over how helpful this is, I guess, but that's not my point here. The problem is that the redirect involves going through a connection to npm.community which is signed with a wildcard cert that is only good for *.github.com.

Potential Solution

If you're going to leave a redirect page there, it should be signed with a cert that is valid for the domain that the user is visiting.

(It would be great if the redirect went somewhere more useful for getting actual NPM support, like this repository, or a direct link to the npm/feedback repo, rather than the package repository homepage, but that's neither here nor there.)

Affected URL

http://npm.community/

@thw0rted thw0rted added Documentation documentation related issue Needs Triage needs review for next steps labels Feb 23, 2023
@thw0rted
Copy link
Author

I also found #698, #977, and #1280, but I'm not sure they're relevant. I also tried to report this on npmjs.com but without a login my only option was to treat it as a "security issue" (which it is, sort of), but there were no applicable sub-issue types for "bad cert on a redirect to your site", so here we are.

@fritzy
Copy link
Contributor

fritzy commented Mar 16, 2023

The certificate appears to be in good shape.

@fritzy fritzy closed this as completed Mar 16, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Documentation documentation related issue Needs Triage needs review for next steps
Projects
None yet
Development

No branches or pull requests

2 participants