All Questions
273 questions
5
votes
1
answer
60
views
Area 51 proposals used as sidebar advertising cause security warnings
For example, Christianity Stack Exchange is running an ad for the Hebrew Language proposal. This causes Firefox to give security warnings.
Connection is Not Secure
Parts of this page are not ...
- 7,393
3
votes
1
answer
211
views
SSL Insecure Connection error on www.blender.stackexchange.com
I was using the site all well and fine, then all of a sudden I got the error below on every page I tried.
However now the site is working again. Was there some temporary SSL problem, or did the ...
- 9,504
1
vote
0
answers
39
views
Why do some sites redirect to HTTPS but not others? [duplicate]
More specifically, http://*meta.stackexchange.com/ redirects to https://*meta.stackexchange.com, but http://*stackexchange.com/ does not redirect to https://*stackexchange.com. It is the same with the ...
- 24.7k
7
votes
2
answers
246
views
Area 51 - Insecure connection issue when click a link
UPDATE:
Since Area 51 is not supporting SSL yet. But the Area 51 link in the footer of Meta Stack Exchange site and in the Your Communities dropdown list contains https://, clicked from there it ...
- 39k
-17
votes
1
answer
139
views
Why hadn't SE had HTTPS for a long time?
I'm novice in security, but after reading the post Network-wide HTTPS: It's time I'm confused. As in the answer of Better HTTPS support for Stack Exchange sites, having an SSL certificate is not ...
- 6,016
4
votes
1
answer
184
views
Google.ca sent me to the wrong URL for Android Enthusiasts Meta, so my browser gave the error: SSL_ERROR_BAD_CERT_DOMAIN
I found a bug. It's either Google Canada's fault or Stack Exchange's fault, or a combination. I'm not sure which.
Steps to reproduce
Do a Google Canada search for: [ android stack exchange questions ...
3
votes
0
answers
29
views
Mixed content on stackexchange.com [duplicate]
When I open https://stackexchange.com/, the padlock icon in my Firefox has a yellow warning triangle icon, clicking on it, the message says:
Connection is Not Secure
Parts of this page are not ...
- 2,241
8
votes
1
answer
101
views
Bug in migration target selection
I tried to mod-migrate a question from meta.sf to here but I encountered an issue where I can't select meta.stackexchange.com as a target.
If I select any "normal" site like "stackoverflow", "super [...
- 1,318
4
votes
2
answers
111
views
CodeGolf.SE Meta site fails to load with ERR_TOO_MANY_REDIRECTS
Here is an example of the problem:
I have HTTPS Everywhere installed if that may be doing anything.
- 318
4
votes
1
answer
68
views
Why does the meta.site to site.meta edit by Community show up more than once?
We've just switched from meta.site.SE to site.meta.SE, and Community♦ is going around editing the links. I went and looked at the revision history of one such post, and was surprised to the edit show ...
- 84.5k
9
votes
1
answer
59
views
Server error on migrated away question
When I try to visit this question on meta.SE, I get a server error (HTTP 500).
It has been migrated away to meta.SO, where I can look at it without a problem.
It also works if I visit the question ...
- 1,959
9
votes
1
answer
466
views
imgur over ssl: Connection refused
Currently imgur fails to serve images over ssl:
> LANG=C curl -v https://i.sstatic.net/yurfY.png
* Hostname was NOT found in DNS cache
* Trying 54.197.236.143...
* connect to 54.197.236.143 port ...
- 1,288
2
votes
1
answer
29
views
How should I handle community promotion ad images in HTTPS edits?
I came across the following post via the Crowdcrafting image cleanup project:
It's one of the community promotion ad posts. I am not sure what to do.
The image link is broken (both http and https ...
- 26.1k
5
votes
1
answer
142
views
Bug report for conversion to SSL
After the conversion of all outgoing links to HTTPS, I now get this error.
I get that error for, near as I can tell, for any page rooted at http://stackexchange.com/ but not for subdomains, such ...
user351780
465
votes
42
answers
25k
views
Network-wide HTTPS: It's time
Update 2017-05-22
stackoverflow.com is now https://. I've written up a lot of what it took to get here in a blog post.
Next up is chat and then https-only cookies. We'll be ramping up HSTS max-age ...
- 126k
7
votes
2
answers
252
views
Help us fix broken images!
This is a request for help for fixing the broken images when switching to HTTPS soon (originated from Roadmap to HTTPS: serving and uploading HTTPS-images only).
There is a Crowd Crafting project set ...
- 91.8k
119
votes
8
answers
5k
views
Roadmap to HTTPS: serving and uploading HTTPS-images only
This is a cross post from mSO, but affecting the whole network. 1. is already enabled network wide, 2. and 3. will be enabled shortly on mSE and another SE community (main site + meta) of our choosing ...
- 22.2k
5
votes
0
answers
128
views
Flair not displaying: All Image URLs must start with HTTPS
When I go to my profile flair, I get the following link:
<a href="https://stackexchange.com/users/5014328">
<img src="https://stackexchange.com/users/flair/5014328.png" ...
- 1,258
2
votes
0
answers
49
views
Links on the user page are HTTP, not HTTPS [duplicate]
When you visit your user page at https://stackexchange.com/users/<ID>/<NAME> (note HTTPS, secure connection), the links (e.g., top questions and answers) take you to the HTTP (not HTTPS!) ...
- 1,076
5
votes
0
answers
43
views
Flair HTML snippet refers to HTTP image src, causes mixed content warning on HTTPS site
I used the Flair HTML snippet from my profile settings on my website, but I noticed that it caused Chrome to report a mixed content warning. It turns out that the image src is pointing to an HTTP ...
- 151
5
votes
0
answers
436
views
Mixed Content: The page at 'https://stackexchange.com/' was loaded over HTTPS, but requested an insecure image 'http://www.gravatar.com/ [duplicate]
Mixed Content: The page at 'https://stackexchange.com/' was loaded
over HTTPS, but requested an insecure image
'http://www.gravatar.com/avatar/...'. This content should also be
served over HTTPS....
- 667
2
votes
0
answers
35
views
Why are all "meta.sitenamehere.stackexchange.com" sites HTTP-only? [duplicate]
Why are all meta.sitenamehere.stackexchange.com sites HTTP-only?
For example, https://unix.stackexchange.com/ supports HTTPS, but its meta site https://unix.meta.stackexchange.com/ does not support ...
- 214
2
votes
0
answers
63
views
Area 51 needs proper [area-defenses] [duplicate]
Unlike any other site, Area 51's main site is unencrypted, its login forms are partially or wholly insecure and its login forms completely break under the browser extension HTTPS Everywhere. That ...
3
votes
0
answers
106
views
Make share links HTTPS for all sites where HTTPS is fully supported
According to this question, the "share" URL is HTTP not HTTPS because HTTPS "is not fully supported". However, this question is 2 years old and I strongly suspect that HTTPS has close to full support ...
- 262
5
votes
0
answers
59
views
How is the roll-out of HTTPS images going?
Today I noticed (over on Crypto.SE, reproduced here on MSE) that when I upload pictures, the imgur links that are automatically inserted into the post now use https://i.stack.imgur.com/ instead of ...
- 608
8
votes
2
answers
93
views
Unable to load various pages via HTTP across Stack Exchange domains while connected to Opera's VPN
I am the 1%. I love Opera. And I also love their new built-in VPN feature. However it appears that there are some compatibility issues when using it across the various Stack Exchange domains.
I don't ...
- 201
5
votes
2
answers
223
views
"HTTPS Everywhere" browser add-on breaks site updates (websocket?)
I run Firefox 49 on Ubuntu 16.04. When I enable the "HTTPS Everywhere" add-on in my browser, Stack Exchange sites stop updating automatically.
That means on the main site, I do not get the N ...
- 2,737
8
votes
1
answer
2k
views
"Your connection to this site is not private"
I'm using Chrome and since a few days/weeks ago I started to see this. Why is that?
- 191
2
votes
0
answers
26
views
https is downgraded when navigating through the Stack Exchange web [duplicate]
Visiting https://stackoverflow.com/ and then navigating to other sites of the Stack Exchange network through the top menu bar, then the other sites are called without https.
The links in the ...
- 191
5
votes
0
answers
56
views
An error occurred submitting the question/answer/edit
Stack Exchange usually works flawlessly but lately I've been unable make posts – questions, answers and edits. When pressing the Submit button, Stack Exchange displays a red pop-up box saying "An ...
- 221
1
vote
1
answer
67
views
Move child metas from meta.sitename.SE to sitename.SE/meta [closed]
Currently, every SE site has two domain names - one for the site itself (sitename.stackexchange.com) and one for its meta (meta.sitename.stackexchange.com). This makes it hard to improve HTTPS support ...
- 1,815
1
vote
0
answers
49
views
Can't reach meta.english.se after Chrome updated to v53 unless I manually remove the https part [duplicate]
I'm on Windows 10 64-bit version 1511 (OS Build 10585.545).
Recently my Chrome updated to version 53.0.2785.89 m (64-bit) and since then I get this error when entering meta ELU.SE:
NET::...
- 1,787
1
vote
0
answers
3k
views
Area 51 login issue after typing an incorrect password once [duplicate]
I also got this issue (which was previously closed as fixed), with a very long error message that had lots of red text overlapping other areas on the page.
This error message was observed after typing ...
- 6,103
4
votes
0
answers
46
views
StackExchange cookies are not set to secure and can leak when visiting http://… links
When I visit a SE site via plain http (such as http://meta.photo.stackexchange.com), I appear as logged in, so it means that the cookies were not set to secure (when I used other SE sites through ...
- 219
12
votes
1
answer
108
views
Make URLs of flair image representing your votes in the final phase HTTPS [closed]
I have cast my 3 votes in the final phase of the Ask Ubuntu elections 2016 and now my Firefox browser warns me because of mixed HTTP/HTTPS content.
Examining this further, the only HTTP content are ...
- 2,737
8
votes
1
answer
155
views
Why aren't protocol relative links recognized as linked questions?
Yesterday someone edited my question and converted all of my un-encrypted http:// links to protocol relative //.
At first I was like "Sweet catch!" because I'm always getting on to our webmaster for ...
- 667
2
votes
0
answers
32
views
SE chat site does not remember last selected tab when using HTTPS
I have noticed that when using the HTTP version of the SE chat site that if I say go to the favorites section and go into a chat room, or I simply go to that section or another section and leave the ...
user280862
2
votes
1
answer
74
views
"https://chat.askubuntu.com/" invalid security certificate [duplicate]
I recently found out from here that there is a https://chat.askubuntu.com/ site, however when I try to go there I get this:
So I thought I should just report that here. My browser is Firefox 47.
user280862
4
votes
1
answer
115
views
Topbar help link to SO Business uses https; pictures are missing [closed]
When clicking on Help in the top-bar and then selecting Business, the URL points to https://www.stackoverflowbusiness.com/?ref=topbar_help.
This leads to some images not being displayed properly (...
- 13.6k
4
votes
0
answers
76
views
Why do stack.imgur images break https? [duplicate]
I find this a bit weird. Suppose I try to load StackOverflow over https:
I get a nice green padlock of feel-good browser feeling that my web browsing is secure. However, if I start to navigate the ...
- 19.6k
3
votes
0
answers
21
views
Use HTTPS for the URLs used in Flair [duplicate]
I noticed that in my flair, the image’s src attribute and the link’s href attribute use HTTP.
It would be much better if the URLs used the HTTPS scheme instead of HTTP. Doing so, would avoid warning ...
8
votes
1
answer
48
views
Newsletter preview doesn't work over HTTPS
When viewing the Newsletters page over an https connection I am unable preview any newsletter. The dialog that is displayed is blank.
The error I get in the console is:
Mixed Content: The page at
'...
- 372
29
votes
0
answers
197
views
Will Stack Exchange switch away from SPDY (fast enough)?
There's an old (2.5 years) question asking Will Stack Exchange support SPDY?, which was answered with a "not in the foreseeable future".
Fast forward those 2.5 years, and now at least parts of SE ...
- 2,269
1
vote
0
answers
44
views
Mixed content warning - Shouldn't HTTPS Everywhere ruleset work? (EDIT) [duplicate]
Recently I've noticed that whenever I open a question that has imgur.com-linked images, I get a mixed content warning (and, indeed, imgur links have http: prefix), which is strange since I use HTTPS ...
- 111
5
votes
1
answer
58
views
HTTPS protocol does not carry over when visiting metas or chat
Question
When navigating throughout SE, can't the protocol be carried over, based on the previous page visited?
I know in Rails (which SE is not written in), you can link to sites as //example.com, ...
user261278
2
votes
0
answers
41
views
Make the address scheme relative on api.stackexchange.com (and blog)
In my setup, for reasons unrelated to this post, http://api.stackexchange.com web-site appears to be missing most of its resources, since even though the site itself is served over the http:// address ...
- 1,268
3
votes
1
answer
84
views
Creative commons link with HTTPS
I just followed the cc by-sa 3.0 in the footer of (some) sites in the Stack Exchange network and wondered, why it is not linked with HTTPS.
Creative commons has a valid certificate, so why not link ...
- 310
4
votes
0
answers
23
views
Dropdown lists on https version of Stack Exchange have http links [duplicate]
Steps to reproduce:
Open some of StackExchange sites, for example https://stackoverflow.com
Click one of the links in "Recent achievements" dropdown list on the navbar
Watch the http://stackoverflow....
- 141
3
votes
0
answers
44
views
Bad SSL/TLS at Stack Exchange: Cloudflares SSL certificates and sometimes no HTTPS at all [duplicate]
Cloudflare
Cloudflare has the options Universal/Flexible SSL, which basically allow websites to serve their website over HTTPS by using a certificate from Cloudflare.
Besides the fact that ...
- 131
3
votes
2
answers
3k
views
Firefox 'Untrusted Connection' warning when logging in any site of StackExchange
When trying to enter https://stackexchange.com/users/login I get the 'This connection is untrusted' warning from Firefox. I'm currently using internet explorer to ask this question. I have no trouble ...
