{"action":"closed","issue":{"url":"https://api.github.com/repos/EFForg/https-everywhere/issues/3234","labels_url":"https://api.github.com/repos/EFForg/https-everywhere/issues/3234/labels{/name}","comments_url":"https://api.github.com/repos/EFForg/https-everywhere/issues/3234/comments","events_url":"https://api.github.com/repos/EFForg/https-everywhere/issues/3234/events","html_url":"https://github.com/EFForg/https-everywhere/issues/3234","id":117859590,"number":3234,"title":"https://microsoft.com/ uses a wildcard subdomain cert","user":{"login":"nealey","id":423780,"avatar_url":"https://avatars.githubusercontent.com/u/423780?v=3","gravatar_id":"","url":"https://api.github.com/users/nealey","html_url":"https://github.com/nealey","followers_url":"https://api.github.com/users/nealey/followers","following_url":"https://api.github.com/users/nealey/following{/other_user}","gists_url":"https://api.github.com/users/nealey/gists{/gist_id}","starred_url":"https://api.github.com/users/nealey/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/nealey/subscriptions","organizations_url":"https://api.github.com/users/nealey/orgs","repos_url":"https://api.github.com/users/nealey/repos","events_url":"https://api.github.com/users/nealey/events{/privacy}","received_events_url":"https://api.github.com/users/nealey/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/EFForg/https-everywhere/labels/ruleset-bug","name":"ruleset-bug","color":"fad8c7"}],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-11-19T17:07:30Z","updated_at":"2015-11-28T23:57:43Z","closed_at":"2015-11-28T23:57:43Z","body":"If you go to http://microsoft.com/, something other than their web server (I am guessing HTTPS everywhere, I can't reproduce it, unfortunately, even in incognito mode) redirects to https://microsoft.com/, which uses a cert issued for *.microsoft.com: this triggers a security message in Chrome and FF."}}