This question already has an answer here:

Each site used to have its own chat room(s), even beta sites.

Now on https://security.stackexchange.com and https://softwarerecs.stackexchange.com when I open the upper left menu and click "chat", I am sent to:


Is it a new policy, or a bug, or my fault?

See the URL in the lower left when I hover my mouse on "chat":


When I click on it, it sends me to a page where 27 pages of chatrooms appear, with entertaining names such as "Maid Café" or "The Frying Pan", and finding which ones are about information security is a big challenge.

marked as duplicate by ShaWiz support Nov 27 '14 at 10:10

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

  • I also go to chat.se, but it only shows rooms from the site i was on. – Scimonster Nov 27 '14 at 9:32
  • @Scimonster: Try again in HTTPS – Nicolas Raoul Nov 27 '14 at 9:57

Looks like that when using https, the Referer header is not being sent to the server, thus http://chat.stackexchange.com/ can't know where you came from, and won't show the proper rooms.

If you're browsing the non-secure site e.g. https://security.stackexchange.com/ it's working fine.

This is by design behavior of browsers, according to this: Is HTTP header Referer sent when going to a http page from a https page?

So, we need to ask the team to change the code so that a querystring parameter will be sent, and not rely on the Referer anymore, if we want this to work properly in https.

  • +1 You are right! I believe this should be considered a bug. Might be hard to fix, but still a bug. – Nicolas Raoul Nov 27 '14 at 9:44
  • @NicolasRaoul the bug is in the initial logic relying on referer. The original intention is working just fine, so I doubt it can be considered a bug. :/ – ShaWiz Nov 27 '14 at 9:46
  • 1
    I agree with you that relying on referer is a bug. The whole thing has to be refactored, as HTTP becomes less and less tolerated. – Nicolas Raoul Nov 27 '14 at 9:53
  • @NicolasRaoul agree, however turns out it's a dupe. Closed now, feel free to upvote the original report. – ShaWiz Nov 27 '14 at 10:10

Not the answer you're looking for? Browse other questions tagged .