26

I asked this question about programmatically finding details of an SSL certificate represented by a X509Certificate2 .NET object. It was closed as "too broad" in ten minutes.

How is this too broad? Either the .NET Framework has handles for that task (which I failed to find) or it doesn't. How would I formulate such question so that it stays and hopefully gets answered?

35
  • 2
    @CodyGray The unfunniest part is I clicked through the five users who voted to close the question and only one of them has serious activity in c# tag.
    – sharptooth
    Feb 24, 2016 at 12:18
  • 8
    I was one of the people who closed your question. The reason it happened so fast was most likely because your question was featured in the socvr chat room. The reason I personally voted to close this question is that it is broad and requires a full tutorial-like explaination of specific functions to answer. (and the answers could be wildly different)
    – Magisch
    Feb 24, 2016 at 12:20
  • 4
    It doesn't need to be discussed in chat. It should be discussed here. On the Meta question about its closure and about how it can be improved for possible re-opening. Feb 24, 2016 at 12:23
  • 8
    I guess you could have an argument about wether or not we should reopen it and close it as Lacking MCVE instead. I fail to see how <Is there a way I can do $nonspecificX> is fundamentally different from the 100s of questions like these we get and close daily.
    – Magisch
    Feb 24, 2016 at 12:26
  • 3
    @sharptooth An example certificate and example verification and example desired output would go a long way. Right now its very unspecific and broad.
    – Magisch
    Feb 24, 2016 at 12:28
  • 11
    It's hard to see how an example certificate would do anyone who could answer the question any good. If you know what an X509Certificate2 object is, you don't need to see an example. Sigh, looks like the close voters were hoping to see a "debug my code" dump instead. Feb 24, 2016 at 12:32
  • 3
    @CodyGray The whole point of a MCVE is to narrow the (now too broad) question and Make sure that the answerers can clearly and completly understand what is necessary. Including a desired input and output will go a long way towards that.
    – Magisch
    Feb 24, 2016 at 12:33
  • 28
    It is not a "debug my code" question. You don't need an example. There is no "desired input and output." He's asking a very straightforward question about the existence of specific functionality in a library. It cannot be broad, the two possible answers are literally "do xyz" and "can't be done." An example would just make the question more difficult to understand and less relevant to others in the future. I know what an MCVE is; it is not required for all questions, only the "debug my code" ones. Feb 24, 2016 at 12:37
  • 11
    @Magisch: Is the title "How do I programmatically find which certificate was used to sign a given certificate?" so hard to understand? I have no experience working directly with SSL certs and that title sounds reasonably narrowed down to me. It's not like the question is asking "what is an SSL certificate?" - that would be too broad.
    – BoltClock
    Feb 24, 2016 at 12:38
  • 3
    Haha the picture! ZOMG now it is a good question! Feb 24, 2016 at 12:40
  • 3
    @CodyGray Yeap!!! I guess it would go stellar if it had a lolcat.
    – sharptooth
    Feb 24, 2016 at 12:42
  • 5
    @sharptooth For low-traffic tags, it is virtually impossible to get questions closed without the aid of non-experts in that tag. The fact that non-experts voted to close your question has little to do with whether or not the question was appropriately closed.
    – cimmanon
    Feb 24, 2016 at 13:19
  • 3
    The point here is that your comment is way off. Even in high-traffic tags, not everyone who has expertise actively participates in that tag, giving the illusion that they are not "experts" according to SO. In fact, the technologies I used at work are ones that I have little to no activity in (but they are the ones where I hand out a lot of upvotes).
    – cimmanon
    Feb 24, 2016 at 14:26
  • 14
    lack of activity in a tag is no measure of knowledge, I do not participate in many tags I am also an expert in for one simple fact. By now the reasonably questions have been asked and answered dozens of times in those tags, and unless I am close to getting a gold badge in that tag, I do not need the rep. The rest are extremely localized or are some bizarre edge case bug I have no interest in trying to solve. So just because someone does not have a bunch of rep activity from a tag does not mean they are unqualified, their activity might just be in cleaning house which you get nothing.
    – user177800
    Feb 24, 2016 at 14:46
  • 4
    @CodyGray Extended discussion between two users actually always belongs in chat; you can ask any moderator and they'll tell you the same thing.
    – TylerH
    Feb 25, 2016 at 14:48

3 Answers 3

27

I was one of five users who voted to close your question. Since you specifically asked me in a (deleted) comment on your question about why it was closed (presumably I am the user who has the serious activity in the tag you mentioned here), I will answer.

For the record, and if it's relevant, I came across your question when it was linked to in the SO Close Vote Reviewers chat room. I did not feel pressured into voting to close your question as a result of it appearing there, nor would my actions have been different if I'd seen your question from the main page or the Close Votes review queue.

the first time - it seems that following your question being reopened, it was closed for being too broad and reopened a second time: I did not participate in the closing the second time.


The entirety of the first revision of your question is:

In my C# code I have a X509Certificate2 which represents an SSL certificate from local certificate store. The certificate is signed with some intermediate certificate which maybe is present in the local store, maybe not.

How do I know a thumbprint or anything equivalent which would let me identify which certificate was used to sign my certificate?

The default message which accompanies a question closed as too broad reads (emphasis mine):

There are either too many possible answers, or good answers would be too long for this format. Please add details to narrow the answer set or to isolate an issue that can be answered in a few paragraphs. If this question can be reworded to fit the rules in the help center, please edit the question.

Since you hadn't posted your attempts to try this yourself, there's no code for us to go off. I felt that any answers posted could have wildly different approaches to finding out which certificate was used to sign yours, which wouldn't necessarily be helpful.


I see that you added

, so using X509Chain.Build() will probably not work

to the question after it was closed, which shows that you had at least tried (or ruled out) something.

From my understanding of the 'too broad' close reason your question, in the state it was in when it was closed, was too broad since it didn't show what you'd tried so far. Had I seen your edits before others opened it, I would have voted to reopen it. Likewise, were your question shown to me in its current state, I would not have voted to close it.


I will point out that it was only last week that I gained sufficient reputation (3,000) to cast close-votes on questions; I can only blame this on over-exuberant application of what I interpreted the spirit of the 'too broad' close-vote reason to be.

If I was wrong to do so (and comments on the question, e.g. by Cody Gray, BoltClock ♦, et. al. indicate so), then I apologise.

9
  • 7
    "From my understanding of the 'too broad' close reason your question, in the state it was in when it was closed, was too broad since it didn't show what you'd tried so far." This is not correct. "Too broad" is not a synonym for "what have you tried." There are cases of overlap, as with the "no MCVE" closure reason, but that would be for questions where the person has posted a code dump without any relevant context and/or has essentially asked the community to write a big bunch of code for him. Those should be closed, but you have to be careful with dogmatic adherence to that rule. Feb 24, 2016 at 13:19
  • 18
    The thing I'd ask you to think about is whether you think this site should be a debugging service. If you require all questions to include a specific discussion of what has been tried and an MCVE, then you have effectively turned us into a debugging service. Personally, I don't see anything wrong with reasonably scoped questions about features of a particular library or language. I assume the confusion here (since none of us are apparently security certificate experts) was whether sharptooth's question was reasonably scoped. I think it is; you don't need a tutorial on certs to answer it. Feb 24, 2016 at 13:22
  • 2
    @CodyGray - I'd not thought of it that way. I'll be more careful with cases like this in future.
    – Wai Ha Lee
    Feb 24, 2016 at 13:28
  • 4
    Disregarding a confusion about what 'too broad' means, the original question didn't really give the perception of being an on-topic question, even when it can be well established now that it was. What has been improved since that initial moment is exactly that: the looks of the question, not the content. With a pretty picture as icing on the cake. And now things are chugging along nicely. That might be the kind of work that more questions need up front to cope with the fact that they require your eyes to be wide open, but there isn't much guidance about that I think.
    – Gimby
    Feb 24, 2016 at 13:44
  • 1
    From my understanding of the 'too broad' close reason your question, in the state it was in when it was closed, was too broad since it didn't show what you'd tried so far." Too broad ~= not enough research. Asker not done enough -> downvote because of not enough (re)search. Feb 24, 2016 at 14:40
  • 2
    you might find this @Shog9♦'s answer on "Make it easier to close job shop “gimme teh codez” questions" insightful.
    – jfs
    Feb 24, 2016 at 18:02
  • 3
    If you see close reason from the good point of view (please can you address these issues, to improve your question) seeing the original version both to broad and unclear would have helped to improve the question and it did. Note not addressing directly gimme teh codez problem, but the issue: show us at what point you are? (broad), what do you exactly expect from answer (unclear) Feb 24, 2016 at 23:55
  • 1
    Another of Shog9's answers on providing MCVEs in questions: Is it always a good idea to demand the OP “post some code”?
    – BoltClock
    Feb 26, 2016 at 9:23
  • @BoltClock If we demand some code we likely get Linux kernel code.
    – sharptooth
    Feb 26, 2016 at 10:26
15

Since some people seem to be conflating "What have you tried" with "Too Broad," some review might be in order.

Too Broad is useful for two categories of questions:

  1. Questions which require a book (or the better part of a book chapter) to answer, and

  2. Questions that are polls, recommendations or "big lists of things."

In other words, the close reason is meant for exactly those situations that it describes: the answers are expected to be too long or too many.

Too broad doesn't mean "incomplete" or "lack of effort." If the question isn't sufficiently researched, apply a downvote. If there isn't enough information in the question to make it answerable, close it as "Unclear what you are asking."

We need to stop being allergic to "How do I [do something]" questions. "How-To" questions are perfectly fine. If the question is on-topic*, clear and not too broad (i.e. answerable), it is welcome on Stack Overflow. If you consider such questions lazy or uninteresting, then simply leave them for someone else to answer.

*You already know what "on-topic" means; if you don't, read the Help Center's "What kinds of questions can I ask here" article. Yes, we still have special requirements for "how do I fix my broken code" questions, including an MCVE, that don't necessarily apply to other types of questions.

4

I don't agree that it should have been closed, but it was linked in the SO CVR chat room, and they've very close-vote happy.

As I understand it, your question is "how do I tell which intermediate cert signed my X509Certificate2 in my C# code", which is pretty specific. I voted to re-open.

edit: And in mentioning the SO CVR room, I'm sure this answer will attract downvotes, which shows that the system is pretty broken, but that's why the question was closed.

8
  • 6
    We are throwing many accusations here. Users are asked to read the questions and if they are not convinced to expose their cases. I've disagreed with some closures and gave specific reasons why it shouldn't be closed.
    – Braiam
    Feb 24, 2016 at 12:50
  • 17
    As one of the long standing room owners of the SOCVR I do understand that our room might be perceived as a nasty evil voting mob. It is hard to fight such misconceptions but I can assure you that our FAQ is clear about the rules to be followed by our regulars and our room moderation is focused on those rules. We do take re-open requests serious (as you can see from our transcript). If needed we are happy to come forward on meta and rectify moderation we have done in error.
    – rene
    Feb 24, 2016 at 12:54
  • 4
    @rene, I have a question. You say that your room is not "a nasty evil voting mob" and that "it is hard to fight such misconceptions." I imagine that it is. What does your chat room offer by way of keeping the site clean that the closure queues do not already offer? I mean, if I want to help out and vote to close some questions, why should I join [cv-plz] rather than just clicking through the queue? Feb 24, 2016 at 12:59
  • 2
    @Magisch Almost no one reads FAQs or room rules. It's like the Star Wars extended universe -- people deeply invested in the topic know it exists, but for all intents and purposes, it doesn't count.
    – user559633
    Feb 24, 2016 at 13:03
  • 1
    Ugh, I read all of that and I don't see how it answers my question. I find two principal arguments: (1) having a posse improves morale, (2) "all members concentrate on a single tag at a time [to achieve] a higher chance of completing the review tasks that we process." I don't understand that second one. You complete a review task by making a decision and acting (or not) on it. What does it matter if that's all done on the same tag or not? Oh, and there are bots. Which I totally don't understand, but that's probably because I don't know anything about the chat thingadongdong. Feb 24, 2016 at 13:09
  • 2
    @tristan Then take the conversation to the chatroom I just created. This extended discussion isn't appropriate here and has been moved to chat.
    – Taryn
    Feb 24, 2016 at 14:14
  • 5
    @CodyGray The room focuses specially on questions that attract spam or VLQ/NAA answers, it also focuses on old, off-topic questions that gather new answers, and on tag cleanup/burnination efforts. It's also an open sounding board for advice on the quality of questions, and how to improve them, for new and veteran users. Probably most helpful is that all this occurs in real-time. What rene said is true; the room allows both close- and reopen-vote messages and handles them both seriously.
    – TylerH
    Feb 24, 2016 at 16:05
  • 3
    I think there was some confusion. I've been idling in that room for a while, and its clearly a room about Combat Vehicle Reconnaissance, not Close Vote Reviewing.
    – Gimby
    Feb 25, 2016 at 8:50

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .