All Questions
273 questions
0
votes
0
answers
26
views
Connection downgraded to http after authenticating with SSL, auth broken with HTTP Everywhere [duplicate]
I opened https://meta.stackoverflow.com/, authenticated using Google OpenID, and was returned to https://meta.stackoverflow.com/
When using HTTPS Everywhere, authentication fails because of this:
...
6
votes
1
answer
263
views
SSL Errors on Stack Exchange
I noticed beginning today that I'm receiving ssl_error_illegal_parameter_alert on various stack exchange sites. I've encountered the error so far on Stack Overflow, Meta Stack Overflow, and Superuser. ...
7
votes
2
answers
175
views
The Stack Exchange SSL certificate does not cover Ask Ubuntu or Math Overflow
It looks like HTTPS recently went live on mSO, and so I went looking at the shiny new SSL certificate.
Unfortunately, I discovered that it seems to cover all the Stack Exchange sites except for Ask ...
12
votes
0
answers
215
views
XKCD oneboxing over HTTPS [duplicate]
When posting an xkcd link in chat, it doesn't get oneboxed when using the https version of the URI:
http://xkcd.com/660/
vs
https://xkcd.com/660/
The first one gets oneboxed, but the latter just ...
21
votes
2
answers
161
views
Close as duplicate fails on HTTPS links
When closing a question as a duplicate there is a text box which says: "search, or enter a question link or numeric id". You can copy and paste a question link into here, but this fails if the URL ...
28
votes
0
answers
182
views
HTTPS urls don't onebox in chat [duplicate]
When posting an HTTPS url like https://stackoverflow.com/..., it does not onebox in chat.
For example: https://chat.stackexchange.com/transcript/message/12317079#12317079
12
votes
0
answers
105
views
Area 51 and Careers favicons are loaded with an absolute scheme
The Area 51 favicon is loaded with an absolute (http) scheme, which makes my pretty green lock go away when I open the site switcher:
All of the links to notifications et al also use the http scheme, ...
2
votes
2
answers
448
views
Is Stack Overflow's (SSL) log-in process optimal from a UX perspective? [duplicate]
Does Stack Overflow use SSL when transmitting passwords during the log-in process? This question comes up when you log-on, because there is no green lock in the browser when logging in.
I do use the ...
14
votes
3
answers
2k
views
HTTPS Problem when accessing Stack Overflow in China
I don't know if this is 100% true, but I live in China, and I now require a VPN to access Stack Overflow. It seems like the following files aren't loading in China. The index page itself is loading, ...
1
vote
0
answers
79
views
DigiCert says "Your server is not sending the right intermediate certificates" for Stack Overflow [duplicate]
We have tight security setting our our network, that seem to be preventing Stack Overflow from loading. I did some digging and found that the static page that supplies the CSS and other static content ...
10
votes
0
answers
449
views
SSL certificate OCSP verification issue on cdn.sstatic.net, SO's JS/CSS not loading
Since the beginning of July I have intermittent trouble loading SO because I randomly can't verify the CDN's SSL certificate through OCSP. Network connectivity is otherwise good (traceroute & ping ...
13
votes
1
answer
356
views
sstatic.net SSL certificate is for an incorrect domain
Noticing that the "Human Verification" image did not show, I found that the src, https://sstatic.net/stackoverflow/img/captcha-conchords-robots.jpg, shows that sstatic.net is giving an SSL vertificate ...
8
votes
1
answer
170
views
Wrong certificate being used for error image
I just saw a server error message at https://serverfault.com/error?aspxerrorpath=/questions/520272/php-fpm-performing-worse-than-mod-php.
The large image on that page is broken as it's being served ...
3
votes
1
answer
39
views
User flair image should be served over SSL as well
Unfortunately, the current flair image is only served over plain HTTP. Naturally, if you embed it directly on a page served over SSL, you will get mixed content warning from your browser.
Please ...
3
votes
0
answers
142
views
Why can't I use my openid with HTTPS? Why does it have to be HTTP? Is it because my HTTPS cert is from cacert? [closed]
Today I tried to add the following openid to my stackoverflow account: https://thejh.net. However, it failed with this error message:
Unable to log in with your OpenID provider:
No OpenID ...
15
votes
1
answer
346
views
Search results on https://stackexchange.com are broken because of "insecure content"
The search results on https://stackexchange.com are blocked because of:
[blocked] The page at https://stackexchange.com/search?q=https ran
insecure content from http://www.google.com/jsapi.
I am ...
4
votes
1
answer
154
views
Is something wrong with the stack exchange root certificate? [duplicate]
Possible Duplicate:
Better HTTPS support for Stack Exchange sites
I usually visit Stackoverflow through https. Since a few days, Safari will warn me that it can't verify the identity of the ...
2
votes
0
answers
344
views
Google Chrome warning of an SSL problem with Stack Overflow [duplicate]
Possible Duplicate:
Better HTTPS support for Stack Exchange sites
When I go to Stack Overflow from Chrome, I get this warning:
I just installed Chrome on Mint 12. Not sure if this is only ...
2
votes
1
answer
270
views
Wildcard SSL Cert producing error on Facebook.Stackoverflow.com [duplicate]
Possible Duplicate:
Better HTTPS support for Stack Exchange sites
Found a wildcard error with Facebook.stackoverflow.com, thought you should know!
187
votes
5
answers
4k
views
Better HTTPS support for Stack Exchange sites [duplicate]
So it looks like Stack Exchange now supports HTTPS (to some extent). Which is awesome! But there are a few problems, the main one being that some content is delivered over the CDN, which is plain HTTP....
6
votes
1
answer
1k
views
Retrieve html5.js using https when using a secure connection
The page https://stackexchange.com (kudos for SSL) works flawlessly on all browsers except IE, which says
Internet Explorer blocked this website from displaying content with security ceritifcate ...
9
votes
1
answer
306
views
Allow https links as valid when adding a new answer to Stack Exchange section [closed]
When you go to your profile and want to add a link to an answer on Stack Exchange you can paste a custom URL to an answer. If that starts with https you get the message that this does not link to ...
52
votes
0
answers
410
views
Make chat onebox HTTPS links
When I paste a link like http://www.xkcd.com/975 on chat, it promptly oneboxes the comic. However if I post the HTTPS version of that https://www.xkcd.com/975 it doesn't. This is true for all other ...