Linked Questions

-9
votes
1answer
262 views

Please support HTTPS by default [duplicate]

Please redirect to an HTTPS connection by default on stackoverflow.com To illustrate the problem, please see the screenshot below where a man-in-the-middle attack is being used to forge responses ...
11
votes
0answers
376 views

HTTP session hijacking vulnerability on Stack Overflow [duplicate]

Firesheep was released yesterday, a Firefox extension that makes it very easy to do HTTP session hijacking for users of insecure websites. It looks like Stack Overflow (and company) doesn't use SSL ...
3
votes
0answers
133 views

Add HTTPS support for StackExchange websites [duplicate]

Possible Duplicate: Why doesn't SO fix the Firesheep style cookie theft? Would like to see the StackExchange websites all support HTTPS.
840
votes
74answers
175k views

The Many Memes of Meta

Catchphrases and concepts that spread from person to person are known as memes, which, courtesy the Internet, can now explode across the Earth like a highly contagious virus (hence "going viral"). As ...
198
votes
7answers
6k views

I am not a robot!

Some days ago, the spam protection was turned up a notch. Unfortunately, it overshot the target by far. Now, as soon as I make two edits in close succession (which happens often – I’m sloppy), I am ...
187
votes
5answers
3k views

Better HTTPS support for Stack Exchange sites [duplicate]

So it looks like Stack Exchange now supports HTTPS (to some extent). Which is awesome! But there are a few problems, the main one being that some content is delivered over the CDN, which is plain HTTP....
118
votes
8answers
4k views

Roadmap to HTTPS: serving and uploading HTTPS-images only

This is a cross post from mSO, but affecting the whole network. 1. is already enabled network wide, 2. and 3. will be enabled shortly on mSE and another SE community (main site + meta) of our choosing ...
64
votes
2answers
2k views

Would it be possible for Stack Overflow to be accessible over IPv6?

According to my IPv6 tunnelbroker Hurricane Electric the world will end in approximately 712 days when we finally run out of IPv4 addresses. Would it be possible to enable IPv6 access to the Stack ...
28
votes
4answers
2k views

Getting logged out multiple times… issue continues

I stay logged into SO from multiple computers at my location using my Google ID. Today, for some reason, multiple times from the same multiple computers, I'm getting repeatedly bumped out and having ...
15
votes
4answers
417 views

Vote to emergency suspend for three 5k+ or 10k+ users?

There was a case a few days back of a user going crazy and starting edit wars in all of his 42 questions, resulting in 50-100 new revisions per question. It being the weekend, it took 1-2 hours until ...
-1
votes
1answer
1k views

Why is spam verification necessary for users with more than 3000 reputation points? [duplicate]

Possible Duplicates: Please stop asking me a captcha with over 500 reputation. I AM A HUMAN Why is Captcha for higher rep users even necessary? This is really bugging me nowadays. All of the ...
4
votes
1answer
119 views

Is something wrong with the stack exchange root certificate? [duplicate]

Possible Duplicate: Better HTTPS support for Stack Exchange sites I usually visit Stackoverflow through https. Since a few days, Safari will warn me that it can't verify the identity of the ...
4
votes
1answer
406 views

Non-HTTPS link in notifications areas on HTTPS SE sites

I have noticed that since getting the Firefox add-on HTTPS Everywhere that all SE sites have gone HTTPS as they should, however I have also noticed that on the HTTPS versions every site link except ...
8
votes
1answer
374 views

If an account gets hijacked and used for posting illegal material, will Stack Exchange be willing to cooperate with local attorneys?

It makes several years that this post is status-planned. There are reason to consider it won’t be status-completed in the upcoming years. So whatever I can do, my account can be hijacked anytime ...
16
votes
0answers
271 views

Store the full OpenID URL, including scheme and domain name, differentiating HTTP from HTTPS

The association of an OpenID with the relying part must store the scheme used (OpenID spec 11.5.2): 11.5.2. HTTP and HTTPS URL Identifiers Relying Parties MUST differentiate between URL ...