882379 - https://mzl.la/ is unreachable

Status: RESOLVED FIXED

(Infrastructure & Operations Graveyard :: WebOps: Other, task)

Description

[Kohei Yoshino]

https://mzl.la/ is unreachable due to a timeout error.
http://mzl.la/ works well.

Comment 1

[Chris Turra [:cturra]]

mzl.la services are routes through bitly. i personally don't have access to our bitly account, but will see if i can dig something up.

$ nslookup cname.bitly.com
...
Non-authoritative answer:
Name:	cname.bitly.com
Address: 69.58.188.50
Name:	cname.bitly.com
Address: 69.58.188.49


$ dig +short mzl.la
69.58.188.49

Comment 2

[Chris Turra [:cturra]]

i tracked down credentials to our bitly enterprise account and reviewed the configuration. everything looks to be setup and functioning correctly. i do not see any way that https would work in this case -- bitly doesn't provide us a way to manage/support https.

Comment 3

[Kohei Yoshino]

Oh, okay, other domains using the Bitly Enterprise service, like tcrn.ch or nyti.ms, are also unreachable when loading via SSL.

Comment 4

[sjw]

This is quite bad. Every short link posted in social media networks, SUMO or elsewhere is vulnerable against MITM attacks.
There are open alternatives like https://yourls.org/
I vote for reopen.

Comment 5

[Kohei Yoshino]

One thing Mozilla could do here is to ask Bitly to adopt Let’s Encrypt this November to enable SSL for all the customers including Mozilla.

Comment 6

[Ashish Vijayaram [:ashish]]

Please open a new bug. The original request in this bug has nothing to do with Comment 4 and Comment 5.