<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Scott--thank you!</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> Cantor, Scott <cantor.2@osu.edu><br>
<b>Sent:</b> Tuesday, March 1, 2022 4:02 PM<br>
<b>To:</b> Shib Users <users@shibboleth.net><br>
<b>Cc:</b> Paul Wilt <Paul.Wilt@Clarivate.com><br>
<b>Subject:</b> Re: Bad server certificate trying to get to the top-level https://shibboleth.net from AWS or a zscaler address</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt;">
<div class="PlainText">On 3/1/22, 3:56 PM, "Paul Wilt via users" <users@shibboleth.net> wrote:<br>
<br>
> Whoever runs <a href="https://urldefense.com/v3/__http://www.shibboleth.net__;!!NknhfzgzgQ!mog2Ju37xwcZaJoM_ugt_sIlvELTRrajpDGP9NiT4rWjycIcTswPWGPuKcIoCrlxGfU$">
https://urldefense.com/v3/__http://www.shibboleth.net__;!!NknhfzgzgQ!mog2Ju37xwcZaJoM_ugt_sIlvELTRrajpDGP9NiT4rWjycIcTswPWGPuKcIoCrlxGfU$</a> seems to have fixed the certificates that caused my zscaler<br>
> InternetSecurity system to bitterly complain when I would try to access the Shibboleth Consortium. Thanks to<br>
> whoever made that change!!! Greatly appreciated.<br>
<br>
Matthew Slowe took it back and got the right people to fix it.<br>
<br>
My concern is that nothing "automated" should be accessing <a href="https://urldefense.com/v3/__http://www.shibboleth.net__;!!NknhfzgzgQ!mog2Ju37xwcZaJoM_ugt_sIlvELTRrajpDGP9NiT4rWjycIcTswPWGPuKcIoCrlxGfU$">
https://urldefense.com/v3/__http://www.shibboleth.net__;!!NknhfzgzgQ!mog2Ju37xwcZaJoM_ugt_sIlvELTRrajpDGP9NiT4rWjycIcTswPWGPuKcIoCrlxGfU$</a> . We do have redirects, but anything meant to be accessed by any tools should not be getting sent to that server, it
should resolve on shibboleth.net alone. So there may be a missing redirect or somebody is doing something they really don't need to be.<br>
<br>
-- Scott<br>
<br>
<br>
</div>
</span></font></div>
<div>
<p style="font-size:8pt; line-height:8pt; font-family: 'Calibri',serif; color:#696969">
Confidentiality note: This e-mail may contain confidential information from Clarivate. If you are not the intended recipient, be aware that any disclosure, copying, distribution or use of the contents of this e-mail is strictly prohibited. If you have received
this e-mail in error, please delete this e-mail and notify the sender immediately.
</p>
</div>
</body>
</html>