how to specify trusted hosts in windows config file

[Peter J. Holzer]

On 2020-03-31 08:35:35 +1100, Chris Angelico wrote:
> On Tue, Mar 31, 2020 at 8:21 AM <dcwhatthe at gmail.com> wrote:
> > For pypi.org alone, my dns lookup differs from yours:  151.101.128.223.
> 
> Ahh, I think I see what's happening. Something's interfering with your
> DNS - that's a Fastly IP address.

The four addresses you got were also Fastly addresses:

| pypi.org. 86278 IN A 151.101.192.223
| pypi.org. 86278 IN A 151.101.64.223
| pypi.org. 86278 IN A 151.101.128.223
| pypi.org. 86278 IN A 151.101.0.223

And in fact the address dcwhatthe gets (151.101.128.223) is one of those
four.

So it doesn't look like something is interfering with DNS. 

But maybe something intercepts the SSL connection? Since he wrote that
he's at the office, I'm guessing its some kind of malware protection,
probably at the corporate firewall.

A simple way to check this is to open the URL (here https://pypi.org) in
the browser and check the certificate. For me it says (in Firefox, other
browsers may format the information slightly different):

    Certificate issued to:

    Python Software Foundation
    Wolfeboro
    New Hampshire, US

    Verified by: DigiCert, Inc.

dcwhatthe will probably see something different there.

        hp

-- 
   _  | Peter J. Holzer    | Story must make more sense than reality.
|_|_) |                    |
| |   | hjp at hjp.at         |    -- Charles Stross, "Creative writing
__/   | http://www.hjp.at/ |       challenge!"
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://mail.python.org/pipermail/python-list/attachments/20200405/44ea113c/attachment.sig>