how to specify trusted hosts in windows config file

[dcwhatthe at gmail.com]

On Sunday, April 5, 2020 at 2:15:21 PM UTC-4, Peter J. Holzer wrote:
> --yrj/dFKFPuw6o+aM
> Content-Type: text/plain; charset=us-ascii
> Content-Disposition: inline
> Content-Transfer-Encoding: quoted-printable
> 
> On 2020-03-31 08:35:35 +1100, Chris Angelico wrote:
> > On Tue, Mar 31, 2020 at 8:21 AM dc wrote:
> > > For pypi.org alone, my dns lookup differs from yours:  151.101.128.223.
> >=20
> > Ahh, I think I see what's happening. Something's interfering with your
> > DNS - that's a Fastly IP address.
> 
> The four addresses you got were also Fastly addresses:
> 
> | pypi.org. 86278 IN A 151.101.192.223 | pypi.org. 86278 IN A 151.101.64.223 | 
> pypi.org. 86278 IN A 151.101.128.223 | pypi.org. 86278 IN A 151.101.0.223
> 
> And in fact the address dcwhatthe gets (151.101.128.223) is one of those four.
> 
> So it doesn't look like something is interfering with DNS.=20
> 
> But maybe something intercepts the SSL connection? Since he wrote that he's at 
> the office, I'm guessing its some kind of malware protection, probably at the 
> corporate firewall.
> 
> A simple way to check this is to open the URL (here https://pypi.org) in the 
> browser and check the certificate. For me it says (in Firefox, other browsers 
> may format the information slightly different):
> 
>     Certificate issued to:
> 
>     Python Software Foundation
>     Wolfeboro
>     New Hampshire, US
> 
>     Verified by: DigiCert, Inc.
> 
> dcwhatthe will probably see something different there.
> 
>         hp
> 
> --=20
>    _  | Peter J. Holzer    | Story must make more sense than reality.
> |_|_) |                    |
> | |   | hjp         |    -- Charles Stross, "Creative writing
> __/   | http://www.hjp.at/ |       challenge!"
> 
> --yrj/dFKFPuw6o+aM
> Content-Type: application/pgp-signature; name="signature.asc"
> 
> -----BEGIN PGP SIGNATURE-----
> 
> iQIzBAABCgAdFiEETtJbRjyPwVTYGJ5k8g5IURL+KF0FAl6Jry4ACgkQ8g5IURL+
> KF0TnRAAp3r4DxFh24jsXmuLlUykG9Yd4wOloVyGKyajRJjYqQ0AgkTgZrTz6A5N
> 0YVvUnINlY65kkJXA703fb+f7mS7Ij6V3/UvxHGxitLatDauHvlkENTD1GzJzf7l
> Lg05G3krkEpb41S+GLFYO3MVFbeBPV9jUKoHJs96UHxi5tHiTe3IA14xmgooeS32
> 3/JI+wAFV5pR5ICM8sTcRu+9wrNNEtbdg8sNfodIh5d9j3kY7s4SV0srPI3hBRUE
> F949/YAPCA8rH5RcCkM3JQuJeI24hOCBvMXXknjY3pcC4ocAPAXHznTAgNtn8dKd
> Z3uzFkql/7Sd1FK5qIKIvsBUS3TlOvVfbAm8rxZZPitbMEa/GWhDEQq3J5GGrPDx
> 7Sty4TegLa292TJZcEJqDcFEAMjVETGeYRTEkqXdHfbVT8KYy4Lwyka1fLjpFiCC
> mvZdeV2KppO3Kae0ow0mgAOXrLO719ZrgxLrzENA/K4Foq+iOZxozSyGiqjjVzO8
> W7icMQt7sPDCfDfAXxkeEr58yehRdKD6K8gpmQ2inEwk7jAVtauPIUuwlfZzIllm
> 5B6LRAtF7FbZsL1KRzYKtZi2TCPTND/2jW8nUQGaTCEW6W/fa0VLkHhr3sZFmmYA
> I0I3XHyh/At5RCv9XgTtcpchgXvEJlD2D27X08TQNb1k2U7DL6w=
> =crJH
> -----END PGP SIGNATURE-----
> 
> --yrj/dFKFPuw6o+aM--

Thanks, Peter.  For the time being, I'm dealing with this by doing the development on my personal laptop, including the generation of the executable.  We're all working from home and logging in during the pandemic, anyway.

When this is done and I have the time, I'll try & trace this down, while trying to avoid office politics.



Regards,

DC