3

This is related to: Cannot load static content

Now that your CSS are hosted on a server asking for HTTPS, the company where I work filters it (HTTPS is authorized by whitelist only). I think a lot of companies do the same... Could you please put back the statics on a HTTP server?

Edit:

To be more precise, this is the link that causes our issue:

<link rel="stylesheet" type="text/css" href="https://cdn.sstatic.net/stackoverflow/all.css?v=8a7874f4f2dd">
Improve this question
9
  • 4
    that'll bring about mixed-mode content warnings
    – Sathyajith Bhat
    Commented Jul 3, 2013 at 18:04
  • Is this question related to this: meta.stackexchange.com/questions/187204/… why does meta work fine but stackoverflow doesnt work?
    – JonH
    Commented Jul 3, 2013 at 18:07
  • 2
    @JonH Meta's assets aren't served from the CDN
    – Tim Stone
    Commented Jul 3, 2013 at 18:08
  • Okay...I just don't understand the issue at hand, this was working just a week ago. What changed that caused this to break?
    – JonH
    Commented Jul 3, 2013 at 18:08
  • @JonH The CDN assets were all switched to be served over HTTPS as part of a plan to fully support HTTPS on the network, which will naturally cause problems if a firewall blocks those requests.
    – Tim Stone
    Commented Jul 3, 2013 at 18:12
  • @JohH: Your company firewall.
    – Martijn Pieters
    Commented Jul 3, 2013 at 18:17
  • @MartijnPieters - I will check with our network administrators if that is the case.
    – JonH
    Commented Jul 3, 2013 at 18:19
  • @JonH: A site access whitelist is commonly implemented by a firewall (perhaps in tandem with a proxy server).
    – Martijn Pieters
    Commented Jul 3, 2013 at 18:21
  • The CDN is temporarily not using HTTPS anymore.
    – Arjan
    Commented Aug 3, 2013 at 21:03

1 Answer 1

Reset to default
7

The issue here is something in your pipe blocking HTTPS requests - that's very bad. We will be switching the entire network to SSL in the coming months (first offering it, then kicking users over to it automatically).

You should speak with your network admin as to why this is blocked. Unless they are looking at your browsing (which this prevents, short of local certs), there's no reason it should be blocked.

Improve this answer
3
  • 8
    I forget off-hand, was "insane corporate IT policies" on your list of SSL migration worries? :P
    – Tim Stone
    Commented Jul 3, 2013 at 18:16
  • Tank you for your reply. Blocking untrusted HTTPS websites does seem sane to me, especially in certain work environments. I've asked our sysadmins to allow HTTPS for your statics' server, which will solve the issue if my request is accepted. Nevertheless I must tell I don't understand why you need a secured connection for statics like a CSS. This is a burden for both your users, and your server, and probably for no ROI. But I might be wrong and I'd like an explanation.
    – Noël Bardelot
    Commented Jul 4, 2013 at 8:43
  • After a little research, I understand that an website serving dynamic content via HTTPS, and static content via HTTP cannot be trusted by the browser who then complains.
    – Noël Bardelot
    Commented Jul 4, 2013 at 9:20

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .