Linked Questions

-9 votes
1 answer

Please support HTTPS by default [duplicate]

Please redirect to an HTTPS connection by default on To illustrate the problem, please see the screenshot below where a man-in-the-middle attack is being used to forge responses ...
William Entriken's user avatar
11 votes
0 answers

HTTP session hijacking vulnerability on Stack Overflow [duplicate]

Firesheep was released yesterday, a Firefox extension that makes it very easy to do HTTP session hijacking for users of insecure websites. It looks like Stack Overflow (and company) doesn't use SSL ...
jrdioko's user avatar
  • 295
3 votes
0 answers

Add HTTPS support for StackExchange websites [duplicate]

Possible Duplicate: Why doesn't SO fix the Firesheep style cookie theft? Would like to see the StackExchange websites all support HTTPS.
Raymond's user avatar
  • 353
892 votes
76 answers

The Many Memes of Meta

Catchphrases and concepts that spread from person to person are known as memes, which, courtesy the Internet, can now explode across the Earth like a highly contagious virus (hence "going viral&...
202 votes
7 answers

I am not a robot!

Some days ago, the spam protection was turned up a notch. Unfortunately, it overshot the target by far. Now, as soon as I make two edits in close succession (which happens often – I’m sloppy), I am ...
Konrad Rudolph's user avatar
187 votes
5 answers

Better HTTPS support for Stack Exchange sites [duplicate]

So it looks like Stack Exchange now supports HTTPS (to some extent). Which is awesome! But there are a few problems, the main one being that some content is delivered over the CDN, which is plain HTTP....
NullUserException  อ_อ's user avatar
118 votes
8 answers

Roadmap to HTTPS: serving and uploading HTTPS-images only

This is a cross post from mSO, but affecting the whole network. 1. is already enabled network wide, 2. and 3. will be enabled shortly on mSE and another SE community (main site + meta) of our choosing ...
m0sa's user avatar
  • 22.2k
65 votes
2 answers

Would it be possible for Stack Overflow to be accessible over IPv6?

According to my IPv6 tunnelbroker Hurricane Electric the world will end in approximately 712 days when we finally run out of IPv4 addresses. Would it be possible to enable IPv6 access to the Stack ...
davefiddes's user avatar
28 votes
4 answers

Getting logged out multiple times... issue continues

I stay logged into SO from multiple computers at my location using my Google ID. Today, for some reason, multiple times from the same multiple computers, I'm getting repeatedly bumped out and having ...
Sparky's user avatar
  • 1,769
14 votes
4 answers

Vote to emergency suspend for three 5k+ or 10k+ users?

There was a case a few days back of a user going crazy and starting edit wars in all of his 42 questions, resulting in 50-100 new revisions per question. It being the weekend, it took 1-2 hours until ...
Pekka's user avatar
  • 114k
0 votes
1 answer

Why is spam verification necessary for users with more than 3000 reputation points? [duplicate]

Possible Duplicates: Please stop asking me a captcha with over 500 reputation. I AM A HUMAN Why is Captcha for higher rep users even necessary? This is really bugging me nowadays. All of the ...
Starx's user avatar
  • 1,022
4 votes
1 answer

Is something wrong with the stack exchange root certificate? [duplicate]

Possible Duplicate: Better HTTPS support for Stack Exchange sites I usually visit Stackoverflow through https. Since a few days, Safari will warn me that it can't verify the identity of the ...
Julian's user avatar
  • 143
4 votes
1 answer

Non-HTTPS link in notifications areas on HTTPS SE sites

I have noticed that since getting the Firefox add-on HTTPS Everywhere that all SE sites have gone HTTPS as they should, however I have also noticed that on the HTTPS versions every site link except ...
user avatar
8 votes
1 answer

If an account gets hijacked and used for posting illegal material, will Stack Exchange be willing to cooperate with local attorneys?

It makes several years that this post is status-planned. There are reason to consider it won’t be status-completed in the upcoming years. So whatever I can do, my account can be hijacked anytime ...
user2284570's user avatar
  • 1,643
16 votes
0 answers

Store the full OpenID URL, including scheme and domain name, differentiating HTTP from HTTPS

The association of an OpenID with the relying part must store the scheme used (OpenID spec 11.5.2): 11.5.2. HTTP and HTTPS URL Identifiers Relying Parties MUST differentiate between URL ...
Lawrence Dol's user avatar
  • 4,769