event-registry-python icon indicating copy to clipboard operation
event-registry-python copied to clipboard

Can't connect to API over HTTPs --> API key transmitted without encryption in the request body

Open Palmik opened this issue 2 years ago • 0 comments

Hey, it looks like your SSL certificate is not valid, as I can't access your API endpoints over HTTPs. This meas that the API-key is transmitted in the clear, and any serer between the client and you API (or e.g. anyone on the same LAN) can read the API key.

curl: (60) SSL: no alternative certificate subject name matches target host name 'analytics.eventregistry.org'
More details here: https://curl.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.

Palmik avatar Oct 16 '23 08:10 Palmik