3

Firefox says connection to chat.stackoverflow.com and chat.superuser.com is not secure. The pages look somewhat different from the main chat.SE site too.

I don't know what other SE sites are out there that have a non-standard ???.stackexchange.com address, they might also have this issue.

  • Generally happens because some content is still loaded over http. – hjpotter92 Jul 4 '14 at 6:13
4

When you click the !-in-a-triangle icon, does the popup you see look something like this?

Screenshot!

If so, the problem is that all the chat rooms are full of user avatars, site icons and other display content loaded over insecure HTTP. This is not quite as serious an issue as e.g. insecure scripts would be, and so Firefox does not block such images by default, but it does show a warning icon.

Fortunately, if you don't like the idea of loading images insecurely, there's a way to fix this:

  1. Type about:config into the Firefox address bar, and click past the "Are you sure?" dialog that comes up.

  2. Find the config key named security.mixed_content.block_display_content and set its value to true.

  3. The first two steps will get rid of the insecure content warning, but you'll see a lot of broken images, so the last step is to install either the HTTPS Everywhere extension or the SOUP user script to fix them.

(Alas, the HTTPS image fix included in the current stable version (v1.16.0) of SOUP does not fully support chat. I just checked in some improved code to the development branch that should fix this, but it hasn't been extensively tested yet. I'll need to decide if I'm confident enough in my code to push it to the stable branch today, because if not, the next opportunity will be in two weeks.)

Ps. Related feature request: Make all i.stack.imgur.com links protocol-relative

  • Yes, the notification is as on your image, but I get that on the main chat page, which is supposed to have all content provided securely, not on a chat transcript page. – user1306322 Jul 4 '14 at 7:01

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .