Videodelivery.net certificate error on Vodafone

Website, Application, Performance Security
1

I’ve got a user reporting an invalid certificate when accessing the videodelivery.net domain for hosted Cloudflare videos. On further inspection of the certificate being issued it presents as:

image
image500×528 8.9 KB

Clearly this is Vodafone performing some kind of MITM cert injection which they have misconfigured. Is anyone else experiencing this?

4

After more investigation this seems to be an HSTS related error. I assume at some point they didn’t MITM the certificate and the user accessed the site. Now they’ve injected their own cert and it’s breaking.

5

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.