[SOLVED] Re: Firefox: Warning: Potential Security Risk Ahead for the USPS.com

[local10 <local10@tutanota.com>]

Jan 3, 2022, 23:53 by local10@tutanota.com:

> Jan 3, 2022, 23:08 by dsr@randomstring.org:
>
>> Alright. Put this into your /etc/hosts temporarily:
>>
>> 152.195.33.23  www.usps.com tools.usps.com www.usps.gov
>>
>> That's unlikely to be an optimal IP from their CDN, but it is
>> currently working.
>>
>
> That fixed it, I got the USPS tracking page to load normally. Still not sure why it worked as tools.usps.com resolves for me to 152.195.33.23:
>
> # dig tools.usps.com
> ...
> ....
> ;; ANSWER SECTION:
> tools.usps.com.         42      IN      CNAME   cs1799.wpc.upsiloncdn.net.
> cs1799.wpc.upsiloncdn.net. 2078 IN      A       152.195.33.23
>

OK, I understand now what the problem was. Quite a while ago I added a line into the /etc/hosts to fix a temp DNS issue and completely forgot about it. So while DNS server was correctly resolving tools.usps.com to 152.195.33.23, my previous /etc/hosts entry was overriding it to 23.217.162.158 which was causing the certificate issue.

Thanks to everyone who responded.