Linked Questions

448
votes
40answers
22k views

Network-wide HTTPS: It's time

Update 2017-05-22 stackoverflow.com is now https://. I've written up a lot of what it took to get here in a blog post. Next up is chat and then https-only cookies. We'll be ramping up HSTS max-age ...
0
votes
1answer
217 views

Stackauth.com has certificate issued for *.stackexchange.com [duplicate]

The usual decision when the host name and the name in the certificate don't match is to reject the certificate. I see no reason to desensitize users to Man-in-the-Middle attacks by telling them: "it's ...
7
votes
1answer
444 views

Untrusted connection when visiting per-site meta over SSL [duplicate]

Steps to reproduce: In Firefox (with HTTPS Everywhere), visit a non-trilogy Stack Exchange site (for example, http://movies.stackexchange.com) Get redirected to the HTTPS version Click on meta link (...
1
vote
1answer
1k views

Why am I getting a security warning from Chrome browser when navigating to StackOverflow? [duplicate]

Possible Duplicate: Better HTTPS support for Stack Exchange sites Google Chrome warning of an SSL problem with Stack Overflow I tried to navigate to this Stack Overflow answer Hash algorithms - ...
-9
votes
1answer
254 views

Please support HTTPS by default [duplicate]

Please redirect to an HTTPS connection by default on stackoverflow.com To illustrate the problem, please see the screenshot below where a man-in-the-middle attack is being used to forge responses ...
4
votes
1answer
116 views

Is something wrong with the stack exchange root certificate? [duplicate]

Possible Duplicate: Better HTTPS support for Stack Exchange sites I usually visit Stackoverflow through https. Since a few days, Safari will warn me that it can't verify the identity of the ...
3
votes
1answer
148 views

secure site access [duplicate]

Why can't I access SO and others through https? I believe it should have a https interface.
0
votes
0answers
502 views

Ask Ubuntu is giving the wrong certificate [duplicate]

When I go to www.askubuntu.com I get an error: When I click advanced it says: This server could not prove that it is www.askubuntu.com; its security certificate is from stackexchange.com. This may ...
2
votes
1answer
217 views

Wildcard SSL Cert producing error on Facebook.Stackoverflow.com [duplicate]

Possible Duplicate: Better HTTPS support for Stack Exchange sites Found a wildcard error with Facebook.stackoverflow.com, thought you should know!
16
votes
0answers
121 views

Custom avatars are fetched using http instead of https [duplicate]

Stack Overflow seems to work through HTTPS connection, but the custom avatars (uploaded files, not those from gravatar) are even then fetched from http://i.stack.imgur.com/ using standard http ...
3
votes
0answers
181 views

https access to SO [duplicate]

It's 2013, about time to have this already. Pretty please. Most major websites do this already and it doesn't seem to take more than a couple per cent of any type of resources that they have. ...
1
vote
0answers
78 views

DigiCert says “Your server is not sending the right intermediate certificates” for Stack Overflow [duplicate]

We have tight security setting our our network, that seem to be preventing Stack Overflow from loading. I did some digging and found that the static page that supplies the CSS and other static content ...
2
votes
1answer
60 views

“https://chat.askubuntu.com/” invalid security certificate [duplicate]

I recently found out from here that there is a https://chat.askubuntu.com/ site, however when I try to go there I get this: So I thought I should just report that here. My browser is Firefox 47.
2
votes
0answers
75 views

Google Chrome warning of an SSL problem with Stack Overflow [duplicate]

Possible Duplicate: Better HTTPS support for Stack Exchange sites When I go to Stack Overflow from Chrome, I get this warning: I just installed Chrome on Mint 12. Not sure if this is only ...
3
votes
0answers
63 views

facebook.stackoverflow.com uses an invalid security certificate [duplicate]

facebook.stackoverflow.com uses an invalid security certificate. The certificate is only valid for the following names: *.stackexchange.com , stackexchange.com (Error code: ...

15 30 50 per page