All Questions
273 questions
465
votes
42
answers
25k
views
Network-wide HTTPS: It's time
Update 2017-05-22
stackoverflow.com is now https://. I've written up a lot of what it took to get here in a blog post.
Next up is chat and then https-only cookies. We'll be ramping up HSTS max-age ...
- 126k
325
votes
5
answers
25k
views
TLS 1.0 and TLS 1.1 removal for Stack Exchange services
Update (2020-02-13): This change was completed last night on the Fastly side. Most of our endpoints now have TLS 1.0 and 1.1 disabled. We’ll be addressing our direct load balancers next.
Update (2020-...
- 126k
187
votes
5
answers
4k
views
Better HTTPS support for Stack Exchange sites [duplicate]
So it looks like Stack Exchange now supports HTTPS (to some extent). Which is awesome! But there are a few problems, the main one being that some content is delivered over the CDN, which is plain HTTP....
- 25.5k
119
votes
8
answers
5k
views
Roadmap to HTTPS: serving and uploading HTTPS-images only
This is a cross post from mSO, but affecting the whole network. 1. is already enabled network wide, 2. and 3. will be enabled shortly on mSE and another SE community (main site + meta) of our choosing ...
- 22.2k
77
votes
1
answer
2k
views
Let's Encrypt certificate issue requiring urgent renewal
Stack Exchange's certificates are in need of renewal ASAP due to the Let's Encrypt CAA rechecking bug. They have sent out notification emails to affected users but I'm reporting this here just in case....
user153011
60
votes
2
answers
1k
views
Make all i.sstatic.net links protocol-relative
Stack Overflow has HTTPS in some places! However, this breaks most existing image links. Could those be made protocol-relative, or react to the requesting protocol, or just always use HTTPS?
The same ...
- 5,077
52
votes
0
answers
410
views
Make chat onebox HTTPS links
When I paste a link like http://www.xkcd.com/975 on chat, it promptly oneboxes the comic. However if I post the HTTPS version of that https://www.xkcd.com/975 it doesn't. This is true for all other ...
- 6,218
44
votes
0
answers
206
views
Can the http://meta.stackexchange.com/ in the Community user’s network profile page be changed to https://…?
The network profile of the Community user, mentions http://meta.stackexchange.com/.
Can this be changed to https://meta.stackexchange.com? On copying and browsing it is automatically redirected to ...
- 2,585
37
votes
2
answers
508
views
foo.com is sketchy; “How to Format” and help should use HTTPS links in examples
In the “How to Format” bar that shows when editing the body of a question or editing an answer, there is this example for how to format:
<http://foo.com>
[foo](http://foo.com)
<a href="http:/...
- 9,760
36
votes
3
answers
3k
views
Accessing per-site metas gives 403 forbidden from cloudflare-nginx [closed]
Clicking on https://space.meta.stackexchange.com/ doesn't connect me with the meta S.Ex.SE site.
EDIT: For some entry points, no meta site can be reached. Observation courtesy Gilles.
I consider it ...
- 6,252
35
votes
1
answer
434
views
Announcer badge spike
There has been a recent spike in the number of Announcer badges being awarded on TeX.SE. A query on SEDE highlights this:
The last four months saw the occasional awarding of more than one-a-day, with ...
- 13.6k
34
votes
5
answers
1k
views
All internal links on Stack Exchange sites should be protocol-relative
In preparation for the eventual deployment of full HTTPS support on Stack Exchange, and also to make the currently available "alpha" HTTPS support more usable, all links from Stack Exchange sites to ...
- 31.8k
31
votes
0
answers
252
views
Oneboxing a Stack Exchange post using HTTPS does not work
When you post a link from Stack Exchange into the chatbox using HTTPS, the link does not onebox. However, if you change the link to HTTP, it works. See the screenshot below:
HTTPS URLs should onebox, ...
- 659
29
votes
0
answers
197
views
Will Stack Exchange switch away from SPDY (fast enough)?
There's an old (2.5 years) question asking Will Stack Exchange support SPDY?, which was answered with a "not in the foreseeable future".
Fast forward those 2.5 years, and now at least parts of SE ...
- 2,269
28
votes
0
answers
287
views
Let’s Encrypt chain of trust changes will affect a small number of users on Stack Exchange
tl;dr: As early as September 9th, some users accessing the site from old Android devices (running Android 7.0 and earlier) may see SSL warnings in their browser regarding an invalid certificate when ...
- 10.5k
28
votes
0
answers
182
views
HTTPS urls don't onebox in chat [duplicate]
When posting an HTTPS url like https://stackoverflow.com/..., it does not onebox in chat.
For example: https://chat.stackexchange.com/transcript/message/12317079#12317079
- 4,382
27
votes
1
answer
556
views
Change the HTTP status blog links to HTTPS
In the "We are currently offline for maintenance" page, the status blog link is a HTTP one. Please change it to HTTPS.
Also, in the header which is shown when the site is in read-only mode, ...
- 6,392
26
votes
2
answers
345
views
Permalink short URLs lose HTTPS
Here's something I noticed while testing a client-side fix for this issue.
If you follow a permalink / shortcut URL with an https: protocol, like:
https://meta.stackexchange.com/q/223725
you'll get ...
- 31.8k
26
votes
0
answers
186
views
Convert http links to https in tag wikis
As part of the migration to HTTPS, a bot rewrote http:// links pointing inside the Stack Exchange network to https://. This bot only ran on questions and answers.
Please run the bot on tag wikis as ...
24
votes
0
answers
143
views
A bot script needs to be run to convert meta.[site] URLs to [site].meta URLs
The Community bot already ran through posts to convert internal http:// links to https://, which is great, but it needs to be run one more time: this time, it needs to convert links of this format:
...
- 34.1k
23
votes
2
answers
1k
views
Invalid certificate on all SE sites
Sometime this morning my browsers started blocking all Stack Exchange sites with the following error:
Your connection is not private
Attackers might be trying to steal your information from workplace....
- 2,992
23
votes
2
answers
494
views
Mixed content on many SE sites
Many SE sites (like math.SE) have a problem with mixed content, which causes display bugs in recent browsers. This is particularly evident with math.SE (because of the huge use of MathJax) and with ...
- 537
23
votes
1
answer
312
views
Links in close reasons are (sometimes?) still HTTP
TL;DR:
Links in off-topic close reasons are not HTTPS.
Links to other sites in migration close reasons are not HTTPS.
NB: This question is tagged "custom close reasons". Those include both ...
user248725
23
votes
1
answer
125
views
Images section in editing help page contains only "http://" examples
In editing help page, in "Images" section there are few examples with the URL. All the URLs are with the http:// only. When tried those example in the editor we received the "All image ...
- 39k
22
votes
2
answers
328
views
Help Center pages contain non-HTTPS links
Pages within the help center have many non-HTTPS links on them.
Many of the ones to questions seem to have been updated, but there are non-HTTPS links to the Stack Overflow blog on Don't Ask, links ...
- 9,760
22
votes
0
answers
207
views
Invalid certificate on sg-links.stackoverflow.email
Just received the weekly email from WebMasters, and the links are currently routing to an "Invalid Certificate" error:
Your connection isn't private
Attackers might be trying to steal your ...
- 3,227
21
votes
1
answer
2k
views
Invalid Certificate on *.stackoverflow.com
When trying to browse https://stackoverflow.com I receive an error that the certificate is not valid. The reason is that *.stackoverflow.com comes with a certificate for *.stackexchange.com at the ...
- 2,166
21
votes
1
answer
461
views
Is anybody else having PKI problems connecting using Firefox 67.0?
I suddenly started getting the following error message when using Firefox to access Stack Exchange sites:
An error occurred during a connection to math.stackexchange.com. A required TLS feature is ...
21
votes
2
answers
161
views
Close as duplicate fails on HTTPS links
When closing a question as a duplicate there is a text box which says: "search, or enter a question link or numeric id". You can copy and paste a question link into here, but this fails if the URL ...
- 1,022
20
votes
3
answers
606
views
SSL breaks TeX rendering
TeX rendering is broken on sites like Math and Physics when viewed over SSL.
For example:
https://math.stackexchange.com/questions/630339/pedagogy-how-to-cure-students-of-the-law-of-universal-...
- 12.1k
20
votes
2
answers
466
views
Roadmap for HTTPS/SSL support [duplicate]
Every once in a while, someone comes to Meta to report a bug about something not working and it turns out that person is visiting one of the network sites over HTTPS/SSL. The problem has been growing ...
- 7,979
20
votes
1
answer
167
views
Certificate Expired on SEDE
It looks like the SSL certificate for data.stackexchange.com just expired.
If you were in the middle of running queries you would be greeted with:
Something unexpected went wrong while running ...
reneMod
- 92.1k
19
votes
1
answer
377
views
meta.*.stackexchange.com redirection does not work
In 2017, all child Meta sites moved from meta.*.stackexchange.com to *.meta.stackexchange.com. According to Network-wide HTTPS: It's time there is an automatic redirection:
We've redirected all ...
- 2,549
19
votes
0
answers
96
views
The chat image upload "from the web" is broken for sites that use the new R3 Let's Encrypt SSL certificate
Let's Encrypt expired their X3 root certificate and started issuing certificates with their R3 root certificate at the end of September.
The image uploader in chat offers an option to provide an url ...
reneMod
- 92.1k
18
votes
1
answer
128
views
Why doesn't SE default to https for the change password page?
The meta question page that I'm on right now seems to be https by default. However, when you go to change your SE password, it is plain http. This seems like an oversight to me. I know that in the ...
- 283
18
votes
1
answer
247
views
StackExchange's OAuth login broken - identifying an HTTPS request as non-HTTPS
Recently (as in, the last few hours - however, it may have been broken for a few days), I've been unable to login via Stack Exchange for a third party application with Stack Exchange's OAuth support. ...
- 1,310
18
votes
0
answers
180
views
Could the citation helper include DOI-links as https rather than http?
The citation helper usually includes some link in the citation. Specifically, it includes a link to zbMATH.
And a link to a paper - quite often as DOI.
However, the DOI-links are in the "old"...
- 15.6k
17
votes
1
answer
199
views
Questions don't link if the URL uses HTTPS
When linking a question via HTTPS, the question doesn't appear in the Linked Questions sidebar.
In the question My avatar automatically changed, this was the initial screenshot:
So then the question ...
- 7,266
17
votes
2
answers
291
views
Community user profile has a non-HTTPS link in the "About" section
I was recently reading about Community, when I noticed this ironic, very minor, problem in its profile: the link to an answer in the profile's "About" section is not HTTPS.
However, Stack ...
- 9,760
16
votes
1
answer
1k
views
Images from imgur fail over ssl
When loading TeX.SX over TLS (e.g. Force equal hinting when combining symbols) with HTTPS Everywhere, images are not displayed.
Firefox shows this error (e.g. for https://i.sstatic.net/k1rDN.png):
...
- 1,288
16
votes
0
answers
86
views
Make all links in 'Stack Gives Back 2022!' and 'Stack Gives Back 2023!' HTTPS
Two links in Stack Gives Back 2022! are HTTP, while their HTTPS equivalents work fine:
Doctors Without Borders (Médecins Sans Frontières)
UNICEF
In the spirit of Network-wide HTTPS: It's time, ...
GlorfindelMod
- 256k
16
votes
0
answers
123
views
Custom avatars are fetched using http instead of https [duplicate]
Stack Overflow seems to work through HTTPS connection, but the custom avatars (uploaded files, not those from gravatar) are even then fetched from https://i.sstatic.net/ using standard http ...
- 277
15
votes
3
answers
168
views
stackpromos.com HTTPS cert is invalid
The certificate presented does not work for stackpromos.com, leading to a warning in my browser about an invalid certificate.
- 3,930
15
votes
1
answer
346
views
Search results on https://stackexchange.com are broken because of "insecure content"
The search results on https://stackexchange.com are blocked because of:
[blocked] The page at https://stackexchange.com/search?q=https ran
insecure content from http://www.google.com/jsapi.
I am ...
15
votes
1
answer
125
views
Stacksnippets has the incorrect SSL certificate :(
As discussed here, was prompted to post it as a brand new question, so here it is :-).
Earlier today there was an issue with Stack Snippets, caused by the move to Denver. That issue was fixed, but ...
- 589
15
votes
1
answer
113
views
https links to same site don't auto-prettify
Normally, when one posts a link to a question on the same site, it automatically 'prettyfies' the link.
https://meta.stackexchange.com/questions/218060/https-links-to-same-site-dont-auto-prettify ...
user213963
15
votes
0
answers
274
views
The SSL certificate for the archived Stack Exchange Gaming Blog is invalid
I tried to visit the Stack Exchange Gaming Blog's archive today but was greeted by a classic SSL warning. Turns out, the certificate behind https://blog.gaming.stackexchange.com/ is invalid as it is ...
- 300
14
votes
1
answer
222
views
Is the Android SE app transmission encrypted?
I’d like to know the transmission of SE Android app is encrypted or not with https. Please make me confirm.
- 383
14
votes
3
answers
2k
views
HTTPS Problem when accessing Stack Overflow in China
I don't know if this is 100% true, but I live in China, and I now require a VPN to access Stack Overflow. It seems like the following files aren't loading in China. The index page itself is loading, ...
- 281
14
votes
1
answer
180
views
Change to HTTPS links in the /users?tab=moderators page
In the /users?tab=moderators page of all SE sites (SO too), there is a link to the election page under each moderator's profile but the links are HTTP. Please change them to HTTPS.
Reasons to post ...
- 6,392