All Questions
273 questions
28
votes
0
answers
287
views
Let’s Encrypt chain of trust changes will affect a small number of users on Stack Exchange
tl;dr: As early as September 9th, some users accessing the site from old Android devices (running Android 7.0 and earlier) may see SSL warnings in their browser regarding an invalid certificate when ...
- 10.5k
15
votes
0
answers
274
views
The SSL certificate for the archived Stack Exchange Gaming Blog is invalid
I tried to visit the Stack Exchange Gaming Blog's archive today but was greeted by a classic SSL warning. Turns out, the certificate behind https://blog.gaming.stackexchange.com/ is invalid as it is ...
- 2,402
21
votes
2
answers
161
views
Close as duplicate fails on HTTPS links
When closing a question as a duplicate there is a text box which says: "search, or enter a question link or numeric id". You can copy and paste a question link into here, but this fails if the URL ...
3
votes
1
answer
124
views
New nav filters fail to work on HTTPS
On HTTPS, the JavaScript used to update the URL when changing the filter is hardcoded to use plaintext HTTP; it should be protocol-relative.:
Uncaught SecurityError: Failed to execute 'replaceState'...
4
votes
0
answers
64
views
July 2024 roadmap blog post contains http (not https) links
Tl;dr - Could this blog post be updated to use https:// links for MSO/MSE in the final paragraph? Consider using the site names (not domain names) in the visible text, too (meta.stackexchange.com → ...
- 16.3k
5
votes
0
answers
66
views
Opt-out of being logged-in without SSL [closed]
For me at least, partial SSL support with mixed content has been working for a long time. I'm aware that the SSL rollout is a slow process, but whenever I'm connected without an ‘s’ after the ‘http’, ...
- 5,048
12
votes
1
answer
108
views
Make URLs of flair image representing your votes in the final phase HTTPS [closed]
I have cast my 3 votes in the final phase of the Ask Ubuntu elections 2016 and now my Firefox browser warns me because of mixed HTTP/HTTPS content.
Examining this further, the only HTTP content are ...
- 5,048
4
votes
0
answers
161
views
Eek! Chat FAQ formatting gone [closed]
So I was going to read the chat FAQ and saw this:
The formatting looks completely messed up. Is it just me?
UPDATE: This only happens on the https version of the page. On http it displays just fine. ...
- 10.5k
9
votes
1
answer
306
views
Allow https links as valid when adding a new answer to Stack Exchange section [closed]
When you go to your profile and want to add a link to an answer on Stack Exchange you can paste a custom URL to an answer. If that starts with https you get the message that this does not link to ...
- 10.5k
2
votes
1
answer
270
views
Wildcard SSL Cert producing error on Facebook.Stackoverflow.com [duplicate]
Possible Duplicate:
Better HTTPS support for Stack Exchange sites
Found a wildcard error with Facebook.stackoverflow.com, thought you should know!
- 10.5k
22
votes
0
answers
207
views
Invalid certificate on sg-links.stackoverflow.email
Just received the weekly email from WebMasters, and the links are currently routing to an "Invalid Certificate" error:
Your connection isn't private
Attackers might be trying to steal your ...
- 10.5k
8
votes
1
answer
162
views
Links to meta in custom close reasons still use old meta URLs
Strongly related to the continued use of non-HTTPS links, if a custom close reason features a link to meta, that link will be
Using HTTP instead of HTTPS
Using the old format for URLs on meta, meta....
- 6,659
16
votes
0
answers
86
views
Make all links in 'Stack Gives Back 2022!' and 'Stack Gives Back 2023!' HTTPS
Two links in Stack Gives Back 2022! are HTTP, while their HTTPS equivalents work fine:
Doctors Without Borders (Médecins Sans Frontières)
UNICEF
In the spirit of Network-wide HTTPS: It's time, ...
- 175k
10
votes
0
answers
90
views
Link to per-site meta in the sidebar/dropdown "Step 1: Draft your question" is not HTTPS and has the old format meta.*.stackexchange.com
Similar to: Link to parent site is not HTTPS in the sidebar/dropdown "Step 1: Draft your question" on any per-site Meta.
When asking a question on some SE sites, such as Mathematics the ...
- 2,084
19
votes
1
answer
377
views
meta.*.stackexchange.com redirection does not work
In 2017, all child Meta sites moved from meta.*.stackexchange.com to *.meta.stackexchange.com. According to Network-wide HTTPS: It's time there is an automatic redirection:
We've redirected all ...
- 15.6k
119
votes
8
answers
5k
views
Roadmap to HTTPS: serving and uploading HTTPS-images only
This is a cross post from mSO, but affecting the whole network. 1. is already enabled network wide, 2. and 3. will be enabled shortly on mSE and another SE community (main site + meta) of our choosing ...
- 1
4
votes
2
answers
280
views
TLS for meta.*.stackexchange.com, again
When Stack Exchange transitioned to HTTPS, meta.*.stackexchange.com subdomains were changed to *.meta.stackexchange.com subdomains.
The old meta.* subdomains now redirect to the new *.meta subdomains.
...
- 7,785
9
votes
3
answers
387
views
HTTPS certificate error for meta redirect pages (meta.<site>.stackexchange.com)
Visiting https://meta.security.stackexchange.com displays an HTTPS certificate error in Google Chrome and Internet Explorer 10.
For reference, meta.<sitename>.stackexchange.com is the old URL ...
- 7,785
27
votes
1
answer
556
views
Change the HTTP status blog links to HTTPS
In the "We are currently offline for maintenance" page, the status blog link is a HTTP one. Please change it to HTTPS.
Also, in the header which is shown when the site is in read-only mode, ...
- 6,392
12
votes
0
answers
77
views
Link to stackexchange.com is not HTTPS under the default "community-specific" close reason on per-site metas
There is a default close reason available on per-site metas under "Needs improvement → A community-specific reason" that has a link to stackexchange.com that is not HTTPS. For instance, on ...
- 2,084
5
votes
0
answers
66
views
SSL missing in network's all sites page to Server Fault blog
If we go to https://stackexchange.com/sites#questions Server Fault has a link to its old blog, as shown in the screenshot:
The link is missing SSL as can be seen in the code:
<div class="lv-...
- 175k
18
votes
0
answers
180
views
Could the citation helper include DOI-links as https rather than http?
The citation helper usually includes some link in the citation. Specifically, it includes a link to zbMATH.
And a link to a paper - quite often as DOI.
However, the DOI-links are in the "old"...
- 11.9k
5
votes
0
answers
64
views
Expired SSL certificate? [duplicate]
I got an error when I visited meta.politics.stackexchange.com:
meta.politics.stackexchange.com uses an invalid security certificate.
The certificate is only valid for the following names: *.askubuntu....
- 6,659
2
votes
2
answers
95
views
Favicons in the stats widget on beta sites don't use HTTPS
The favicons for Area 51 and Stack Exchange that are shown on sites marked "beta" in the Site Stats widget are using http:// URLs for favicons when visiting the sites over HTTPS.
Mixed ...
- 84.5k
9
votes
1
answer
86
views
Should http links within the SE network be automatically converted to https?
I have noticed that occasionally some people still link to some other posts using http rather than https.
Two random examples I have seen recently: Dependent multiple choice vs. dependent choice - ...
- 4,492
11
votes
1
answer
167
views
Chat https redirects to http
Yes, yes, I know https isn't officially supported.
If you go to a chat room link like https://chat.stackoverflow.com/rooms/1 (note that there isn't a room name), it would automatically redirect the ...
- 193k
14
votes
1
answer
180
views
Change to HTTPS links in the /users?tab=moderators page
In the /users?tab=moderators page of all SE sites (SO too), there is a link to the election page under each moderator's profile but the links are HTTP. Please change them to HTTPS.
Reasons to post ...
- 64k
22
votes
2
answers
328
views
Help Center pages contain non-HTTPS links
Pages within the help center have many non-HTTPS links on them.
Many of the ones to questions seem to have been updated, but there are non-HTTPS links to the Stack Overflow blog on Don't Ask, links ...
- 175k
465
votes
42
answers
25k
views
Network-wide HTTPS: It's time
Update 2017-05-22
stackoverflow.com is now https://. I've written up a lot of what it took to get here in a blog post.
Next up is chat and then https-only cookies. We'll be ramping up HSTS max-age ...
- 6,659
14
votes
0
answers
78
views
Change "http" to "https" in the tag-info imported for the default tags
On every per-site-meta, there are default tags1 which are automatically created when the site is created. At the same time, the tag-info for some of them is created - although there are a few bugs ...
- 15.6k
17
votes
2
answers
291
views
Community user profile has a non-HTTPS link in the "About" section
I was recently reading about Community, when I noticed this ironic, very minor, problem in its profile: the link to an answer in the profile's "About" section is not HTTPS.
However, Stack ...
GlorfindelMod
- 256k
5
votes
0
answers
123
views
Harmonize display names for automatic URL rewrites
A couple of years ago, Stack Exchange switched to HTTPS-only and all internal links were rewritten by (non-bumping) edits by the Community user, like this one here.
I just noticed that on Stack ...
- 7,785
23
votes
1
answer
312
views
Links in close reasons are (sometimes?) still HTTP
TL;DR:
Links in off-topic close reasons are not HTTPS.
Links to other sites in migration close reasons are not HTTPS.
NB: This question is tagged "custom close reasons". Those include both ...
- 15.6k
6
votes
0
answers
52
views
Change blog link in election text to HTTPS
The introductory text for elections contains the following paragraph with a link that's still HTTP:
Community moderators are accorded the highest level of privilege on our community, and should ...
GlorfindelMod
- 256k
12
votes
1
answer
117
views
SEDE magic columns (and site://) do not use HTTPS
Post links generated via the SEDE magic columns (e.g. [Post Link], [Comment Link], etc.) as well as site:// provide HTTP links, but should provide HTTPS links instead.
Example query:
select
(select ...
- 7,785
10
votes
1
answer
108
views
Link to parent site is not HTTPS in the sidebar/dropdown "Step 1: Draft your question" on any per-site Meta
When asking a question here on Meta SE, the sidebar titled "Step 1: Draft your question" (which appears as a dropdown menu on mobile in the responsive design) has the following text:
Is ...
- 64k
11
votes
1
answer
272
views
Is Stack Exchange affected by the upcoming mass revocation of Let's Encrypt SSL certificates?
For a few years now, Stack Exchange has used Let's Encrypt as their SSL security certificate provider.
Just today, a large number of security certificates issued by Let's Encrypt were found to have ...
Brandon OlinStaff
- 356
14
votes
0
answers
150
views
Changing http to https and mobile links for Wikipedia
Many old posts with links to Wikipedia articles contain http rather than https links. As far as I can tell, it is better to have https link rather than http. (After all, internal links have been ...
- 15.6k
5
votes
1
answer
142
views
Bug report for conversion to SSL
After the conversion of all outgoing links to HTTPS, I now get this error.
I get that error for, near as I can tell, for any page rooted at http://stackexchange.com/ but not for subdomains, such ...
CommunityBot
- 1
19
votes
0
answers
96
views
The chat image upload "from the web" is broken for sites that use the new R3 Let's Encrypt SSL certificate
Let's Encrypt expired their X3 root certificate and started issuing certificates with their R3 root certificate at the end of September.
The image uploader in chat offers an option to provide an url ...
reneMod
- 92.1k
1
vote
1
answer
128
views
Links in Stack Exchange security website
I recently found this website: https://stackexchange.com/about/security
I noticed this:
I don't think that's how the link is supposed to be shown. Please fix it.
Also, I noticed some HTTP links. ...
- 160k
23
votes
2
answers
1k
views
Invalid certificate on all SE sites
Sometime this morning my browsers started blocking all Stack Exchange sites with the following error:
Your connection is not private
Attackers might be trying to steal your information from workplace....
- 6,659
2
votes
0
answers
83
views
Certificate Error on Stack Overflow [duplicate]
Every time I open Stack Overflow this happens. But on my laptop it's working fine. This is just only on my PC.
- 6,659
325
votes
5
answers
25k
views
TLS 1.0 and TLS 1.1 removal for Stack Exchange services
Update (2020-02-13): This change was completed last night on the Fastly side. Most of our endpoints now have TLS 1.0 and 1.1 disabled. We’ll be addressing our direct load balancers next.
Update (2020-...
- 36.2k
6
votes
2
answers
138
views
Still HTTP links in /tour on various sites
<Something> Stack Exchange is a question and answer site for <some people>. It's built and run by you as part of the Stack Exchange network of Q&A sites. With your help, we're working ...
- 64k
9
votes
0
answers
135
views
Allow to translate http to https migration revision text
Is it possible to make string like this one in revision list:
replaced http://ru.stackoverflow.com/ with https://ru.stackoverflow.com/
translatable via standard SE translation mechanism?
I suppose ...
CommunityBot
- 1
23
votes
1
answer
125
views
Images section in editing help page contains only "http://" examples
In editing help page, in "Images" section there are few examples with the URL. All the URLs are with the http:// only. When tried those example in the editor we received the "All image ...
- 64k
44
votes
0
answers
206
views
Can the http://meta.stackexchange.com/ in the Community user’s network profile page be changed to https://…?
The network profile of the Community user, mentions http://meta.stackexchange.com/.
Can this be changed to https://meta.stackexchange.com? On copying and browsing it is automatically redirected to ...
- 2,237
0
votes
0
answers
46
views
Meta.*.stackexchange.com sitewise certificate issue [duplicate]
There is a bug where I see a privacy error on all meta.foo.stackexchange.com sites. For example, if I try to enter meta.retrocomputing.stackexchange.com into my browser, I get this warning:
Can ...
- 129
3
votes
0
answers
39
views
Incorrect certificate on hatdash.com / blog.gaming.stackexchange.com [duplicate]
It looks like hatdash.com was used during the 2011 Hat Dash. Both of these links use certificates that are invalid for their domains, making the site show as insecure.
- 7,743