27

This is in regards to the emails sent for stack overflow jobs. e.g. I get emails such as:

screenshot of email

However, when I click on the link, it's blocked due to an invalid SSL certificate:

screenshot invalid certificate

5
  • 2
    Are you using HTTPS Everywhere?
    – Dean Ward StaffMod
    Commented Dec 1, 2017 at 0:11
  • @DeanWard yes, but that's beside the point. Stack Overflow has shown a dedication for https for a variety of reasons. Commented Dec 1, 2017 at 4:47
  • 10
    Absolutely, and we’ll look into addressing it, but... The email rendered http:// for those links because sg-links.stackoverflow.email is a CNAME to a SendGrid owned server. Those are automatic rewrites SendGrid makes for click metrics which we’re not sure we can change the certificate for. HTTPS Everywhere has incorrectly specified a blanket rule for stackoverflow.email which is causing the issue you’re seeing.
    – Dean Ward StaffMod
    Commented Dec 1, 2017 at 7:59
  • 1
    Whilst having this domain without a valid cert is definitely an issue because of the risk of malicious interception it’s not affecting a huge number of users by default. What you’re asking is not a bug, it’s more of a feature request. Re-tagging appropriately...
    – Dean Ward StaffMod
    Commented Dec 1, 2017 at 8:00
  • 3
    @DeanWard The number of affected users is irrelevant: I still call it a bug.
    – Cœur
    Commented Jun 29, 2018 at 9:44

0

Browse other questions tagged .