<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.apple-converted-space
{mso-style-name:apple-converted-space;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-GB" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Hmm … OK I’ve adjusted the configuration slightly, does that work any better?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Freddie
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div style="border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm 4.0pt">
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif"> Raymond Osborn <rayosborn@me.com>
<br>
<b>Sent:</b> 31 May 2022 16:28<br>
<b>To:</b> Akeroyd, Freddie (STFC,RAL,ISIS) <freddie.akeroyd@stfc.ac.uk>; Freddie Akeroyd - STFC UKRI via NeXus-committee <nexus-committee@shadow.nd.rl.ac.uk><br>
<b>Cc:</b> Benjamin Watts <benjamin.watts@psi.ch>; NeXus Committee <NeXus-committee@nexusformat.org><br>
<b>Subject:</b> Re: [NeXus-committee] Fortinet has blocked www.nexusformat.org<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">If I attempt to access <a href="https://nexusformat.org/">https://nexusformat.org/</a>, I get the following warning, at least when connecting from Argonne.<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><img border="0" width="675" height="178" style="width:7.0312in;height:1.8541in" id="_x0031_768B448-79DD-4CDF-9CC2-ADD664B98615" src="cid:image001.png@01D87519.D8D96E30"><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">The problem does not seem to occur if I access the non-encrypted version, i.e.,
<a href="http://nexusformat.org/">http://nexusformat.org/</a>. <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Ray<o:p></o:p></p>
<div>
<p class="MsoNormal"><br>
<br>
<o:p></o:p></p>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal">On May 31, 2022, at 9:56 AM, Freddie Akeroyd - STFC UKRI via NeXus-committee <<a href="mailto:nexus-committee@shadow.nd.rl.ac.uk">nexus-committee@shadow.nd.rl.ac.uk</a>> wrote:<o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Hi Ben,</span><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"> </span><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><a href="http://www.nexusformat.org/"><span style="color:#954F72">www.nexusformat.org</span></a> is a DNS canonical name for<span class="apple-converted-space"> </span><a href="http://nexusformat.github.io/"><span style="color:#954F72">nexusformat.github.io</span></a><span class="apple-converted-space"> </span>as
you found. We look after the server for <a href="http://nexusformat.org/"><span style="color:#954F72">nexusformat.org</span></a><span class="apple-converted-space"> </span>and it just does a redirect to<span class="apple-converted-space"> </span><a href="http://www.nexusformat.org/"><span style="color:#954F72">www.nexusformat.org</span></a>.
which seems to be OK on non-work machines I have tried (my work machines get the same issue as Peter). The server does do virtual hosting of several site, so relies on the http header to know which site to serve (and would probably return what you see if it
couldn’t work that out). Is anybody else having issues with<span class="apple-converted-space"> </span><a href="https://nexusformat.org/"><span style="color:#954F72">https://nexusformat.org/</span></a><span class="apple-converted-space"> </span>not redirecting?</span><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"> </span><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Freddie</span><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"> </span><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"> </span><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><o:p></o:p></span></p>
</div>
<div style="border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm 4.0pt">
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<div>
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span class="apple-converted-space"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </span></span><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif">NeXus-committee
<<a href="mailto:nexus-committee-bounces@shadow.nd.rl.ac.uk"><span style="color:#954F72">nexus-committee-bounces@shadow.nd.rl.ac.uk</span></a>><span class="apple-converted-space"> </span><b>On Behalf Of<span class="apple-converted-space"> </span></b>Watts
Benjamin (PSI) via NeXus-committee<br>
<b>Sent:</b><span class="apple-converted-space"> </span>31 May 2022 15:42<br>
<b>To:</b><span class="apple-converted-space"> </span><a href="mailto:NeXus-committee@nexusformat.org"><span style="color:#954F72">NeXus-committee@nexusformat.org</span></a><br>
<b>Subject:</b><span class="apple-converted-space"> </span>Re: [NeXus-committee] Fortinet has blocked<span class="apple-converted-space"> </span><a href="http://www.nexusformat.org/"><span style="color:#954F72">www.nexusformat.org</span></a></span><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><o:p></o:p></span></p>
</div>
</div>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <o:p></o:p></span></p>
</div>
<div id="divtagdefaultwrapper">
<div>
<p class="MsoNormal"><span style="font-family:"Calibri",sans-serif">Hi Peter,</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Calibri",sans-serif"> I think Freddie and Pete tend to know the most about the web page. I can visit<span class="apple-converted-space"> </span><a href="https://www.nexusformat.org/" id="LPlnk393529"><span style="color:#954F72">https://www.nexusformat.org</span></a><span class="apple-converted-space"> </span>just
fine, but<span class="apple-converted-space"> </span><a href="https://nexusformat.org/" id="LPlnk907869"><span style="color:#954F72">https://nexusformat.org</span></a><span class="apple-converted-space"> </span>brings up a bunch of warnings and a "Fedora Webserver
Test Page".</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Calibri",sans-serif">DNSchecker says that the www version belongs to Github, but the non-www version belongs to Nick Moore at the Science and Technology Facilites Council: Rutherford Appleton Laboratory. Perhaps
you can ask Nick Moore what is going on?</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Calibri",sans-serif">I feel flattered that Fortinet recognised just how<span class="apple-converted-space"> </span><b>exciting</b><span class="apple-converted-space"> </span>our work is when they chose which category
to put it in.</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Calibri",sans-serif">Cheers,</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Calibri",sans-serif">Ben</span><o:p></o:p></p>
</div>
</div>
<div class="MsoNormal" align="center" style="text-align:center">
<hr size="2" width="98%" align="center">
</div>
<div id="divRplyFwdMsg">
<div>
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span class="apple-converted-space"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </span></span><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">NeXus-committee
<<a href="mailto:nexus-committee-bounces@shadow.nd.rl.ac.uk"><span style="color:#954F72">nexus-committee-bounces@shadow.nd.rl.ac.uk</span></a>> on behalf of Chang, Peter (DLSLtd, RAL, LSCI) via NeXus-committee <<a href="mailto:nexus-committee@shadow.nd.rl.ac.uk"><span style="color:#954F72">nexus-committee@shadow.nd.rl.ac.uk</span></a>><br>
<b>Sent:</b><span class="apple-converted-space"> </span>Tuesday, 31 May 2022 2:52:51 PM<br>
<b>To:</b><span class="apple-converted-space"> </span><a href="mailto:NeXus-committee@nexusformat.org"><span style="color:#954F72">NeXus-committee@nexusformat.org</span></a><br>
<b>Subject:</b><span class="apple-converted-space"> </span>[NeXus-committee] Fortinet has blocked<span class="apple-converted-space"> </span><a href="http://www.nexusformat.org/"><span style="color:#954F72">www.nexusformat.org</span></a><o:p></o:p></span></p>
</div>
<div>
<div>
<p class="MsoNormal"> <span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><o:p></o:p></span></p>
</div>
</div>
</div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Hi all,<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">The SSL certificate seems dodgy according to firefox:<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From home broadband:<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <o:p></o:p></span></p>
</div>
<div style="margin-left:36.0pt">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><a href="http://nexusformat.org/"><span style="color:#954F72">nexusformat.org</span></a><span class="apple-converted-space"> </span>uses an invalid security certificate.<o:p></o:p></span></p>
</div>
<div style="margin-left:36.0pt">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <o:p></o:p></span></p>
</div>
<div style="margin-left:36.0pt">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">The certificate is not trusted because it is self-signed.<o:p></o:p></span></p>
</div>
<div style="margin-left:36.0pt">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <o:p></o:p></span></p>
</div>
<div style="margin-left:36.0pt">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Error code: MOZILLA_PKIX_ERROR_SELF_SIGNED_CERT<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From Diamond network (so Janet):<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <o:p></o:p></span></p>
</div>
<div style="margin-left:36.0pt">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Someone could be trying to impersonate the site and you should not continue.<o:p></o:p></span></p>
</div>
<div style="margin-left:36.0pt">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <o:p></o:p></span></p>
</div>
<div style="margin-left:36.0pt">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Web sites prove their identity via certificates. Firefox does not trust<span class="apple-converted-space"> </span><a href="http://www.nexusformat.org/"><span style="color:#954F72">www.nexusformat.org</span></a><span class="apple-converted-space"> </span>because
its certificate issuer is unknown, the certificate is self-signed, or the server is not sending the correct intermediate certificates.<o:p></o:p></span></p>
</div>
<div style="margin-left:36.0pt">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <o:p></o:p></span></p>
</div>
<div style="margin-left:36.0pt">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Error code: SEC_ERROR_UNKNOWN_ISSUER<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Has the DNS entry for<span class="apple-converted-space"> </span><a href="http://nexusformat.org/"><span style="color:#954F72">nexusformat.org</span></a><span class="apple-converted-space"> </span>been
hijacked? Clicking through at home sees the usual site but from work I see:<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><image001.png><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Who’s in charge of the domain name?<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Best regards,<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Peter<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">-- <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">This e-mail and any attachments may contain confidential, copyright and or privileged material, and are for the use of the intended addressee only. If you are not the intended addressee or an authorised recipient of the addressee please
notify us of receipt by returning the e-mail and do not use, copy, retain, distribute or disclose the information in or attached to the e-mail.<br>
Any opinions expressed within this e-mail are those of the individual and not necessarily of Diamond Light Source Ltd.<span class="apple-converted-space"> </span><br>
Diamond Light Source Ltd. cannot guarantee that this e-mail or any attachments are free from viruses and we cannot accept liability for any damage which you may sustain as a result of software viruses which may be transmitted in or with the message.<br>
Diamond Light Source Limited (company no. 4375679). Registered in England and Wales with its registered office at Diamond House, Harwell Science and Innovation Campus, Didcot, Oxfordshire, OX11 0DE, United Kingdom<br>
<o:p></o:p></p>
</div>
</div>
</div>
<div>
<p class="MsoNormal"><span style="font-size:6.0pt">This email and any attachments are intended solely for the use of the named recipients. If you are not the intended recipient you must not use, disclose, copy or distribute this email or any of its attachments
and should notify the sender immediately and delete this email from your system. UK Research and Innovation (UKRI) has taken every reasonable precaution to minimise risk of this email or any attachments containing viruses or malware but the recipient should
carry out its own virus and malware checks before opening the attachments. UKRI does not accept any liability for any losses or damages which the recipient may sustain due to presence of any viruses. </span><o:p></o:p></p>
</div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif">_______________________________________________<br>
NeXus-committee mailing list<br>
</span><a href="mailto:NeXus-committee@nexusformat.org"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:#954F72">NeXus-committee@nexusformat.org</span></a><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif"><br>
</span><a href="https://lists.nexusformat.org/mailman/listinfo/nexus-committee"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:#954F72">https://lists.nexusformat.org/mailman/listinfo/nexus-committee</span></a><o:p></o:p></p>
</div>
</blockquote>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</div>
</body>
</html>