3.9.3

The connection test can now tell you when the fault is ours.

Until now, if your server could reach unrelated sites but not us, the test said it could not tell which end was responsible. It can.

Every request the plugin makes checks the encryption. So a reply arriving at all proves that whatever answered held a security certificate your server trusts for our name — and a certificate cannot be presented without the private key that goes with it, which exists only on our own equipment.

So if your requests reach our address, over a connection your server verified, presenting our own certificate, and something still answers with a security page instead of us — that something is inside our hosting. Not on your network.

In that case the test now says so plainly: there is nothing for you or your host to change, and asks you to send us the result so we can take it up with our provider.

It also names the one thing that would overturn that conclusion — the certificate fingerprint differing from the one we publish — because a conclusion worth stating is worth stating the exception to.