All Questions
273 questions
8
votes
1
answer
104
views
Links in Inbox and Achievements panels lead back to insecure, non-https pages
When I'm on, for example, the secure SO site, and then open the "StackExchange" drop-down, links to other SE sites include their "https" equivalent as well, which is expected. (If I'm on the the ...
user166022
8
votes
0
answers
48
views
Unable to translate error message when post contains a non-https image
If you place the following code into the post body:
[![text][1]][1]
[1]: http://1
you will see an error message:
Text of this message is not available to translate via Transifex.
All image ...
- 69.7k
8
votes
0
answers
49
views
Updating all links to user avatars to use HTTPS [duplicate]
I've recently been firing pull requests at Stack Exchange's new blog on github fixing mixed content warnings, and found that HTTPS is pretty well supported on i.stack.imgur.com, which is where user-...
- 1,528
8
votes
0
answers
105
views
Time to upgrade SSL Cert(s) on *stackexchange.com
When browsing any StackExchange site, my Firefox console displays this warning:
This site makes use of a SHA-1 Certificate; it's recommended you use certificates with signature algorithms that use ...
- 1,584
8
votes
0
answers
72
views
Searching stackexchange.com displays "Loading" and doesn't [duplicate]
The content of the page just says "Loading".
The URL I tried to load was:
https://stackexchange.com/search?q=car+stereo
Am using Chromium browser Version 43.0.2357.81 Built on Ubuntu 14.04, running ...
- 193
8
votes
0
answers
306
views
Adzerk ads loaded insecurely on some SE sites
While answering this question, I noticed that I get the following warnings about blocked insecure active content while viewing math.SE over HTTPS:
The first warning, about MathJax, is a known ...
- 31.8k
8
votes
0
answers
48
views
Sponsored tag icons always delivered using http [duplicate]
Prevent attackers from embedding evil kittens as tag icons! (Well, I faked that one... Really, GitHub doesn't sponsor the tag icon? Sorry for misusing your logo, fitted much too nice here.)
When ...
- 469
7
votes
2
answers
252
views
Help us fix broken images!
This is a request for help for fixing the broken images when switching to HTTPS soon (originated from Roadmap to HTTPS: serving and uploading HTTPS-images only).
There is a Crowd Crafting project set ...
- 91.8k
7
votes
2
answers
246
views
Area 51 - Insecure connection issue when click a link
UPDATE:
Since Area 51 is not supporting SSL yet. But the Area 51 link in the footer of Meta Stack Exchange site and in the Your Communities dropdown list contains https://, clicked from there it ...
- 39k
7
votes
1
answer
513
views
Untrusted connection when visiting per-site meta over SSL [duplicate]
Steps to reproduce:
In Firefox (with HTTPS Everywhere), visit a non-trilogy Stack Exchange site (for example, http://movies.stackexchange.com)
Get redirected to the HTTPS version
Click on meta link (...
- 1,464
7
votes
1
answer
72
views
Attempting to add chat user by profile URL consistently fails
As a moderator on https://raspberrypi.stackexchange.com/, I created a private chat room for the purpose of super-pinging a user to discuss some things.
After I created the room, I tried to add the ...
- 1,595
7
votes
2
answers
175
views
The Stack Exchange SSL certificate does not cover Ask Ubuntu or Math Overflow
It looks like HTTPS recently went live on mSO, and so I went looking at the shiny new SSL certificate.
Unfortunately, I discovered that it seems to cover all the Stack Exchange sites except for Ask ...
- 9,079
7
votes
0
answers
52
views
License links are not HTTPS in README files of Developer Surveys
I was having a look at the 2020 Stack Overflow Developer Survey Results and noticed that the license links in README_2020.txt are not HTTPS. The links seem to be the same in the previous surveys too.
...
user361230
7
votes
0
answers
78
views
Broken links to per-site metas [closed]
Accessing per-site metas over HTTPS is officially unsupported and known to be broken (Accessing per-site metas gives 403 forbidden from cloudflare-nginx, Untrusted connection when visiting per-site ...
- 448
6
votes
2
answers
138
views
Still HTTP links in /tour on various sites
<Something> Stack Exchange is a question and answer site for <some people>. It's built and run by you as part of the Stack Exchange network of Q&A sites. With your help, we're working ...
6
votes
1
answer
91
views
URL link issue in data explorer tutorial page
There is an issue with a URL, in one of the Data Explorer tutorial pages.
In the Tutorial -> Next Steps page, I can see the following description
You can find some interesting queries in this list ...
- 39k
6
votes
1
answer
34
views
Have uploaded images in questions and answers shown through HTTPS like in chat
I have recently noticed (mostly because I have turned on Strict HTTPS in my browser so that it does not allow mixed content on HTTPS pages) that when one uploads an image to a question or answer using ...
user280862
6
votes
2
answers
140
views
Chat link in top bar isn't site-specific when using HTTPS
Since the redesign of the top bar, it appears the chat room link next to a site no longer goes to that site's chats. For instance, this link:
should go to something like https://chat.stackexchange....
- 4,854
6
votes
1
answer
263
views
SSL Errors on Stack Exchange
I noticed beginning today that I'm receiving ssl_error_illegal_parameter_alert on various stack exchange sites. I've encountered the error so far on Stack Overflow, Meta Stack Overflow, and Superuser. ...
- 1,727
6
votes
2
answers
142
views
Losing HTTPS from SO to Meta [duplicate]
Viewing stackoverflow.com HTTPS and clicking on a notification link for the meta site changes from HTTPS to HTTP. The sites should remain in whatever protocol the user is currently using when ...
- 4,779
6
votes
1
answer
1k
views
Retrieve html5.js using https when using a secure connection
The page https://stackexchange.com (kudos for SSL) works flawlessly on all browsers except IE, which says
Internet Explorer blocked this website from displaying content with security ceritifcate ...
- 22.7k
6
votes
1
answer
66
views
Logging out of https://stackexchange.com fails when trying to clear login credentials
So I was trying to reproduce this: Can't logout from Stack Exchange
No luck, but I noticed a few other things:
Logging out leaves you at https://stackexchange.com
Logging back in also leaves you ...
- 454k
6
votes
1
answer
396
views
CAPTCHA doesn't present words
I know there's a new invisible form of CAPTCHA, but I'm not sure what words should be entered. Am I missing something?
Browser logs:
This may or may not be due to the HTTPS issue reported in ...
- 6,103
6
votes
0
answers
52
views
Change blog link in election text to HTTPS
The introductory text for elections contains the following paragraph with a link that's still HTTP:
Community moderators are accorded the highest level of privilege on our community, and should ...
GlorfindelMod
- 256k
6
votes
0
answers
109
views
"Connection is not secure" error in some of the promotion pages
The following promotion pages are with the "Connection is not secure" error.
https://contests.stackoverflow.com/promos/1
https://contests.stackoverflow.com/promos/2
https://contests.stackoverflow....
- 39k
6
votes
0
answers
72
views
Google-hosted Javascript should be loaded only over HTTPS
Stack Exchange loads Javascript required for full site functionality from both local domains as well as third-party domains. Examples of domains from which Javascript is loaded are stackexchange.com, ...
- 8,985
6
votes
0
answers
73
views
Firefox SSL warning for data.stackexchange.com [duplicate]
When visiting https://data.stackexchange.com/stackoverflow/query/edit/200561, firefox tells me that not all parts of the page are secured.
Looking from source, f.ex. following things are not using ...
- 233
6
votes
1
answer
169
views
HTTP -> HTTPS script didn't change everything [duplicate]
In 2017 the network decided to implement the HTTPS protocol, as was announced in Network-wide HTTPS: It's time. Although that post isn't completely marked as status-completed I think most, if not ...
- 36.2k
5
votes
2
answers
223
views
"HTTPS Everywhere" browser add-on breaks site updates (websocket?)
I run Firefox 49 on Ubuntu 16.04. When I enable the "HTTPS Everywhere" add-on in my browser, Stack Exchange sites stop updating automatically.
That means on the main site, I do not get the N ...
- 2,737
5
votes
1
answer
73
views
Mixed content error in Network profile - activity tab
In the network profile activity tab, when trying to expand the answered or asked posts, we are getting the following mixed content error:
Mixed Content: The page at 'https://stackexchange.com/users/...
- 39k
5
votes
1
answer
60
views
Area 51 proposals used as sidebar advertising cause security warnings
For example, Christianity Stack Exchange is running an ad for the Hebrew Language proposal. This causes Firefox to give security warnings.
Connection is Not Secure
Parts of this page are not ...
- 7,393
5
votes
1
answer
79
views
Link to reputation league from profile page is HTTP
The link to reputation leagues from the Activity and Profile tabs are HTTP.
- 39k
5
votes
1
answer
59
views
The “Unable to verify link” got mixed content warning and borked favicon
Stack Exchange use their own advertisement redirection mechanism for various advertisements. When something there goes wrong, they show a friendly error page.
Link to reproduce.
As you can see, the ...
- 175k
5
votes
1
answer
142
views
Bug report for conversion to SSL
After the conversion of all outgoing links to HTTPS, I now get this error.
I get that error for, near as I can tell, for any page rooted at http://stackexchange.com/ but not for subdomains, such ...
user351780
5
votes
1
answer
58
views
HTTPS protocol does not carry over when visiting metas or chat
Question
When navigating throughout SE, can't the protocol be carried over, based on the previous page visited?
I know in Rails (which SE is not written in), you can link to sites as //example.com, ...
user261278
5
votes
1
answer
89
views
Election candidate cards use broken HTTPS meta links
On election pages, such as Software Recommendations' ongoing election, if you're viewing the page over HTTPS, the candidate cards use HTTPS links.
Fine, that's pretty standard behaviour. The problem ...
- 36.3k
5
votes
1
answer
72
views
SE network ads broken on HTTPS
I happened to notice that, while browsing SE over HTTPS, a blank ad-shaped spot sometimes appeared in the sidebar. Looking more closely, I found the following piece of HTML in it:
<script src="...
- 31.8k
5
votes
1
answer
105
views
Is SEDE secure?
The Stack Exchange Data Explorer aka SEDE is not mentioned in Network-wide HTTPS: It's time.
It is not listed in any of the steps, which makes sense as it's not officially part of Stack Exchange, ...
- 175k
5
votes
0
answers
66
views
SSL missing in network's all sites page to Server Fault blog
If we go to https://stackexchange.com/sites#questions Server Fault has a link to its old blog, as shown in the screenshot:
The link is missing SSL as can be seen in the code:
<div class="lv-...
- 28k
5
votes
0
answers
64
views
Expired SSL certificate? [duplicate]
I got an error when I visited meta.politics.stackexchange.com:
meta.politics.stackexchange.com uses an invalid security certificate.
The certificate is only valid for the following names: *.askubuntu....
- 297
5
votes
0
answers
124
views
Harmonize display names for automatic URL rewrites
A couple of years ago, Stack Exchange switched to HTTPS-only and all internal links were rewritten by (non-bumping) edits by the Community user, like this one here.
I just noticed that on Stack ...
GlorfindelMod
- 256k
5
votes
0
answers
175
views
Firefox won't open Stack Exchange sites due to "TLS FEATURE MISSING" [duplicate]
I'm running Firefox Quantun, 67.0 (64 bit) on macOS Mojave and it won't load any of the Stack Exchange sites and instead shows a "Secure Connection Failed" page with error code: ...
- 151
5
votes
0
answers
54
views
Error message for HTTP image sometimes flows over into preview
When editing a post with an embedded HTTP image (example), you'll see an error message asking you to upload it to imgur or specify an HTTPS URL:
However, the lack of a line break after the image in ...
GlorfindelMod
- 256k
5
votes
0
answers
149
views
"Connection is not secure" error in all the stackexchange.com pages
In the StackExchange.com and in the all sub pages, I'm receiving the Connection Is Not Secure error.
Screenshot for reference:
- 39k
5
votes
0
answers
52
views
OpenID login on SEDE over HTTP is broken, doesn't show error [closed]
I was trying to log into SEDE using the Stack Exchange OpenID function. However, without any erros, I kept not being logged in.
Eventually, I discovered I was using the HTTP to connect to SEDE, not ...
- 8,902
5
votes
0
answers
67
views
"How to not be a spammer" help page contains badly-rendered HTTP link on all sites
See the image below. The link to the Meta post is not in HTTPS on all sites (including SO, SU, SF, AU), at this page:
https://*.stackexchange.com/help/promotion
As I tweaked in the F12 Developer ...
5
votes
0
answers
51
views
Chat links to Meta sites have been rewritten with invalid HTTPS
Way back in 2015, a feed bot posted a link to a meta question in a chat room. The link was, in those pre-HTTPS days, http://meta.christianity.stackexchange.com/. However, if you click on it, you are ...
- 7,393
5
votes
0
answers
33
views
Old combined flair links were not updated from http to https
E.g. if you have an old post that contains a global SE site flair:
<a href="http://stackexchange.com/users/947951">
<img src="http://stackexchange.com/users/flair/947951.png" >
</a&...
- 1,396
5
votes
0
answers
128
views
Flair not displaying: All Image URLs must start with HTTPS
When I go to my profile flair, I get the following link:
<a href="https://stackexchange.com/users/5014328">
<img src="https://stackexchange.com/users/flair/5014328.png" ...
- 1,258
5
votes
0
answers
43
views
Flair HTML snippet refers to HTTP image src, causes mixed content warning on HTTPS site
I used the Flair HTML snippet from my profile settings on my website, but I noticed that it caused Chrome to report a mixed content warning. It turns out that the image src is pointing to an HTTP ...
- 151