All Questions
273 questions
16
votes
1
answer
1k
views
Images from imgur fail over ssl
When loading TeX.SX over TLS (e.g. Force equal hinting when combining symbols) with HTTPS Everywhere, images are not displayed.
Firefox shows this error (e.g. for https://i.sstatic.net/k1rDN.png):
...
CommunityBot
- 1
2
votes
1
answer
710
views
Connection is not private when viewing per site meta over HTTPS [duplicate]
I discovered the problem on this thread: If time-travellers always arrive naked how and what would they trade?
In the comments, another user posted a link to another part of the site. I followed the ...
CommunityBot
- 1
4
votes
1
answer
84
views
Can't log into chat with the "HTTPS Everywhere" plugin
I know that HTTPS isn't officially supported, but it works well enough for me on StackExchange most of the time.
Recently something changed with chat so that I can't login to it with the HTTPS ...
CommunityBot
- 1
2
votes
1
answer
146
views
HTTPS favicons on beta sites still use HTTP
Directly related to my last meta post that was status-completed – the favicons on beta sites for the site stats widget doesn't actually use HTTPS, but redirects down to HTTP instead, resulting in the ...
- 5,056
0
votes
1
answer
89
views
The Stack Exchange network is still using HTTP for Google fonts
Since Stack Exchange sites are moving towards HTTPS I was wondering why some pages still use http and not https or // for the Google fonts links or if this is just something that's been missed? For ...
- 6,659
2
votes
0
answers
52
views
Per-site metas broken when using HTTPS [duplicate]
I just noticed that trying to visit one of the per-site metas using HTTPS will (after confirming the security exception due to the limitations of SSL wildcard certificates) give a 403 error:
Yes, I ...
- 31.8k
1
vote
0
answers
36
views
Certificate error on meta.physics.stackexchange.com [duplicate]
Visiting https://physics.meta.stackexchange.com/ gives me a certificate error in Chrome. Here is the certificate that I receive when visiting that page:
CommunityBot
- 1
4
votes
1
answer
141
views
Mixed Content Warning when viewing message in Inbox
Chrome displays a Mixed Content Warning while viewing a message in my Inbox in careers. The image of the default user is served via http instead of https.
Mixed Content: The page at 'https://careers....
- 3,549
15
votes
1
answer
125
views
Stacksnippets has the incorrect SSL certificate :(
As discussed here, was prompted to post it as a brand new question, so here it is :-).
Earlier today there was an issue with Stack Snippets, caused by the move to Denver. That issue was fixed, but ...
CommunityBot
- 1
4
votes
1
answer
250
views
CSS for daily site access calendar on profile page fails to load over HTTPS
Google Chrome:
Version 32.0.1700.107 m
This happens when displaying the profile and clicking on the number of visited days/consecutive.
.
CommunityBot
- 1
1
vote
0
answers
44
views
When did Stack Exchange implement HTTPS? [duplicate]
This is new right? I heard running sites over https was avoided because of issues with ads but now it looks like the entire network has it.
Connection doesn't run over https by default though, at ...
- 109
52
votes
0
answers
410
views
Make chat onebox HTTPS links
When I paste a link like http://www.xkcd.com/975 on chat, it promptly oneboxes the comic. However if I post the HTTPS version of that https://www.xkcd.com/975 it doesn't. This is true for all other ...
CommunityBot
- 1
31
votes
0
answers
252
views
Oneboxing a Stack Exchange post using HTTPS does not work
When you post a link from Stack Exchange into the chatbox using HTTPS, the link does not onebox. However, if you change the link to HTTP, it works. See the screenshot below:
HTTPS URLs should onebox, ...
- 155k
2
votes
1
answer
150
views
Privacy error on some .SE sites
Google Chrome 41.0.2272.118, Ubuntu 14.04
This is the second time I have had this error in the last week or so. Is this a bug on my part, or is there something up with the SE security certificate?
I'...
CommunityBot
- 1
2
votes
1
answer
137
views
StackExchange certificate issued for CloudFlare, SuperUser certificate issued to CloudFlare's FQDN
Two issues with the certs:
SuperUser certificate is issued to CN: ssl4121.cloudflare.com, not superuser.com, and shared with an unrelated site (https://wimdu.co.uk)
StackExchange certificate is ...
CommunityBot
- 1
3
votes
2
answers
47
views
Cannot log into Meta of the Mathematica subsite
Relates to: https://meta.stackexchange.com/a/216394/269660
Despite all efforts, I seem not to be able to login to meta.mathematica.stackexchange.com, even if already logged into mathematica....
CommunityBot
- 1
3
votes
1
answer
438
views
Mixed Content warning when viewing public careers profile
When viewing my public careers profile or open the profile in careers for editing I get a mixed content warning in Chrome for the favicon.ico. The warning does not occur when browsing careers.
...
- 9,799
3
votes
0
answers
44
views
imgur profile pictures loading over http on https pages [duplicate]
I noticed on this page all of the gravatars are loaded from imgur using http instead of https, is there a reason for this or is it a bug?
- 3,930
18
votes
1
answer
128
views
Why doesn't SE default to https for the change password page?
The meta question page that I'm on right now seems to be https by default. However, when you go to change your SE password, it is plain http. This seems like an oversight to me. I know that in the ...
- 283
1
vote
0
answers
51
views
Can't login to *http* meta.startups even though I have an account
I have a login on startups.SE but when I click the login link, the page just re-loads and I remain logged out.
The login link points to https://startups.stackexchange.com/users/login?returnurl=http%...
CommunityBot
- 1
1
vote
1
answer
114
views
Stack Exchange French Login page does not display well in Mozilla Firefox on my Pc
I have noticed that the French StackExchange login pages does not display well in Mozilla Firefox 35.0.1 (the latest at the moment). When for example i visit https://french.stackexchange.com/ and i ...
CommunityBot
- 1
17
votes
1
answer
199
views
Questions don't link if the URL uses HTTPS
When linking a question via HTTPS, the question doesn't appear in the Linked Questions sidebar.
In the question My avatar automatically changed, this was the initial screenshot:
So then the question ...
CommunityBot
- 1
2
votes
1
answer
44
views
Changing room names causes https version to change to http automatically
This is related to my other bug Chat https redirects to http, but it's a bit different.
When you are in a room under https, if the room changes name, the browser automatically refreshes the page to ...
CommunityBot
- 1
8
votes
1
answer
80
views
Can't log into some meta sites
I'm logged into the main sites for Workplace.SE, Physics.SE, Money.SE, and Space.SE; but show as logged out when I go to any of the meta's for those sites. Attempting to log in again results in the ...
1
vote
1
answer
39
views
Click "chat" in a particular site in HTTPS: all chatrooms of all sites appear [duplicate]
Each site used to have its own chat room(s), even beta sites.
Now on https://security.stackexchange.com and https://softwarerecs.stackexchange.com when I open the upper left menu and click "chat&...
CommunityBot
- 1
9
votes
1
answer
128
views
Why do meta sites use fourth-level domains?
This morning, I was seeing confusing behavior while trying to log in to http://meta.worldbuilding.stackexchange.com. Login methods were returning me to the same page, not logged in. I had to turn off ...
- 76.3k
3
votes
1
answer
123
views
Disable SSLv3 network wide
I know HTTPS isn't supported, but sadly we support SSLv3. Can we disable this pls?
Reason:
SSL3 "POODLE" Vulnerability
CommunityBot
- 1
3
votes
0
answers
49
views
Meta chat doesn't work over https
It's great to be able to load chat over https, however while chat.stackexchange.com and chat.stackoverflow.com work, chat.meta.stackexchange.com doesn't:
Attackers might be trying to steal your ...
CommunityBot
- 1
6
votes
0
answers
72
views
Google-hosted Javascript should be loaded only over HTTPS
Stack Exchange loads Javascript required for full site functionality from both local domains as well as third-party domains. Examples of domains from which Javascript is loaded are stackexchange.com, ...
CommunityBot
- 1
3
votes
0
answers
69
views
Stats for HTTPS usage across the network
Are there numbers available on how many users are using the (not officially supported, but much desired) HTTPS versions of the SE sites?
I'd like to see percentage values of HTTP vs HTTPS use, broken ...
CommunityBot
- 1
12
votes
0
answers
52
views
Stack Exchange blogs do not load properly over https
Currently none of the Stack Exchange blogs work over HTTPS. There are several different ways in which they seem to be broken, and the blogs don't seem to be getting served in a consistent manner.
...
- 12.1k
12
votes
0
answers
215
views
XKCD oneboxing over HTTPS [duplicate]
When posting an xkcd link in chat, it doesn't get oneboxed when using the https version of the URI:
http://xkcd.com/660/
vs
https://xkcd.com/660/
The first one gets oneboxed, but the latter just ...
CommunityBot
- 1
2
votes
0
answers
30
views
Editing a question on an HTTPS site redirects you to the HTTP site
I haven't tested this in depth, but after doing a Suggested Edit to a topic on Gaming via HTTPS, I got redirected to the HTTP version of the question.
I only noticed this as the connection I'm on ...
- 175k
6
votes
0
answers
73
views
Firefox SSL warning for data.stackexchange.com [duplicate]
When visiting https://data.stackexchange.com/stackoverflow/query/edit/200561, firefox tells me that not all parts of the page are secured.
Looking from source, f.ex. following things are not using ...
- 15.4k
6
votes
1
answer
66
views
Logging out of https://stackexchange.com fails when trying to clear login credentials
So I was trying to reproduce this: Can't logout from Stack Exchange
No luck, but I noticed a few other things:
Logging out leaves you at https://stackexchange.com
Logging back in also leaves you ...
CommunityBot
- 1
1
vote
1
answer
97
views
HTTPS opt-in during phase in
When Facebook and Gmail were rolling out HTTPS support, there was an option to opt-in to use HTTPS. Is it possible to have a similar functionality for Stack Exchange sites?
I've read the blog post ...
CommunityBot
- 1
3
votes
1
answer
72
views
Insecure connection to chat.<SE site name>.com pages
Firefox says connection to chat.stackoverflow.com and chat.superuser.com is not secure. The pages look somewhat different from the main chat.SE site too.
I don't know what other SE sites are out ...
CommunityBot
- 1
2
votes
1
answer
579
views
https requests to cdn.static.net fail on IE9
I am currently using Internet Explorer 9 on Windows Server 2008. It seems that all https-requests to cdn.sstatic.net (SE's cookieless domain) fail. The corresponding http-request works fine for me. ...
CommunityBot
- 1
1
vote
1
answer
105
views
The linked content on chat servers isn't protocol relative
The page at https://chat.stackexchange.com/ has all the stylesheets and scripts hard bound to use http:
<link rel="stylesheet" href="http://cdn-chat.sstatic.net/chat/css/chat.stackexchange.com.css?...
- 93.1k
3
votes
1
answer
151
views
Invalid SSL certificate on meta.*.stackexchange.com, can't log in without SSL [duplicate]
When I try to access meta.*.stackexchange.com via HTTPS, I get a warning:
meta.codegolf.stackexchange.com uses an invalid security certificate.
The certificate is only valid for the following names:
*...
CommunityBot
- 1
5
votes
1
answer
72
views
SE network ads broken on HTTPS
I happened to notice that, while browsing SE over HTTPS, a blank ad-shaped spot sometimes appeared in the sidebar. Looking more closely, I found the following piece of HTML in it:
<script src="...
CommunityBot
- 1
2
votes
0
answers
60
views
Site switcher doesn't work when using stackexchange.com over https
The top-bar site-switcher doesn't work when we are using https://stackexchange.com/ but works when using https://stackexchange.com/.
Clicking the site-switcher over https instead refreshes the page. ...
CommunityBot
- 1
1
vote
0
answers
39
views
Many pages get a triangle-shaped warning icon in Firefox [duplicate]
Many pages get a triangle-shaped warning icon even when connected over HTTPS due to the presence of insecure content. This is annoying and probably ought to be fixed.
Are there any plans to fix this ...
- 7,266
6
votes
2
answers
140
views
Chat link in top bar isn't site-specific when using HTTPS
Since the redesign of the top bar, it appears the chat room link next to a site no longer goes to that site's chats. For instance, this link:
should go to something like https://chat.stackexchange....
CommunityBot
- 1
21
votes
1
answer
2k
views
Invalid Certificate on *.stackoverflow.com
When trying to browse https://stackoverflow.com I receive an error that the certificate is not valid. The reason is that *.stackoverflow.com comes with a certificate for *.stackexchange.com at the ...
- 126k
20
votes
3
answers
606
views
SSL breaks TeX rendering
TeX rendering is broken on sites like Math and Physics when viewed over SSL.
For example:
https://math.stackexchange.com/questions/630339/pedagogy-how-to-cure-students-of-the-law-of-universal-...
CommunityBot
- 1
4
votes
1
answer
15k
views
Unable to log in using Safari or Chrome – SSL Certificate Issues
OS X Mavericks 10.9.2 / Chrome 33.0... / Safari 7.0.2
I am unable to log in to StackOverflow using Chrome or Safari. Clicking the "log in" link displays a login page UN-styled by CSS and where the "...
- 53
4
votes
1
answer
37
views
Merge Profiles option of Contact Form validation rejects https:// urls in profile fields
Steps to reproduce:
Go to the "Contact Us" page at https://stackoverflow.com/contact
Select "I need to merge user profiles"
The autofilled profile URL may be https://, in which case it will be throw ...
- 175k
1
vote
0
answers
53
views
stackexchange.com (Calomel addon): security broken or untrusted (0%) [duplicate]
I have the Calomel addon installed in Firefox, which evaluates the strength and quality of an SSL certificate when visiting an HTTPS site.
When visiting https://stackexchange.com/ it rates the ...
- 24.9k
1
vote
0
answers
24
views
Captcha not showing on Data Explorer [duplicate]
I was trying to execute a query on data.stackexchange.com, since I wasn't logged in I get asked to solve the captcha (Which is fine). However data.stackexchange.com is failing to display the ...
- 7,979