Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [ssl]

HTTPS (TLS, aka SSL) is newly supported on Stack Exchange. Use this tag for remaining bugs.

2
votes
0answers
28 views

Got invalid certificate error trying to log in

I got an invalid certificate error for stackauth.com a few minutes ago when trying to log in to SuperUser via Google. I tried again (after taking a screenshot and blacking out the potentially ...
1
vote
0answers
25 views

SSL Certificate Error on stackapps.com

When checking to see if there is a meta for stackapps.com I found out that there is none (and a different Panda photo than I'm used to seeing). Also there's an SSL certificate error. This is probably ...
5
votes
0answers
58 views

“Connection is not secure” error in some of the promotion pages

The following promotion pages are with the "Connection is not secure" error. https://contests.stackoverflow.com/promos/1 https://contests.stackoverflow.com/promos/2 https://contests.stackoverflow....
3
votes
0answers
68 views

“Connection is not secure” error in all the stackexchange.com pages

In the StackExchange.com and in the all sub pages, I'm receiving the Connection Is Not Secure error. Screenshot for reference:
3
votes
0answers
36 views

OpenID login on SEDE over HTTP is broken, doesn't show error

I was trying to log into SEDE using the Stack Exchange OpenID function. However, without any erros, I kept not being logged in. Eventually, I discovered I was using the HTTP to connect to SEDE, not ...
9
votes
0answers
94 views

Archived Arqade Blog Overflow gets certificate error

http://blog.gaming.stackexchange.com/2012/08/identifying-games-when-you-cant-remember-the-name/ redirects to https://blog.gaming.stackexchange.com/2012/08/identifying-games-when-you-cant-remember-the-...
4
votes
0answers
54 views

Are non-HTTPS-images now being served?

Regarding the announcement from last March, Roadmap to HTTPS: serving and uploading HTTPS-images only, has there been a recent change to this policy? Non-https images are now being displayed. For ...
8
votes
2answers
154 views

Old HTTP links to SE sites without ending / weren't converted to HTTPS links

About a year ago, several migration scripts were run to change old HTTP network-internal links across the network to HTTPS links. However, it appears that the script didn't modify links that lack the ...
9
votes
1answer
107 views

Why doesn't Area 51 use HTTPS by default?

On the page https://stackexchange.com/sites, there is a link to Area 51. This link doesn't use HTTPS and Area 51 doesn't redirect to the HTTPS page.
10
votes
0answers
64 views

Don't allow embedded images from HTTP sources in chat

Quite often I see a mixed content warning when looking at an SE chat room: This is typically caused by images linked in chat hosted on an HTTP source, not an HTTPS one like the SE Imgur account. ...
4
votes
0answers
60 views

“How to not be a spammer” help page contains badly-rendered HTTP link on all sites

See the image below. The link to the Meta post is not in HTTPS on all sites (including SO, SU, SF, AU), at this page: https://*.stackexchange.com/help/promotion As I tweaked in the F12 Developer ...
6
votes
1answer
119 views

CAPTCHA doesn't present words

I know there's a new invisible form of CAPTCHA, but I'm not sure what words should be entered. Am I missing something? Browser logs: This may or may not be due to the HTTPS issue reported in ...
13
votes
0answers
35 views

Questions migrated from the meta site get the wrong link to the original question

See for example this question, migrated to Drupal Answers from its meta site. The link given in migrated from meta.drupal.stackexchange.com Oct 19 '13 at 16:40 points to https://meta.drupal....
7
votes
1answer
99 views

Winter Bash 2017 : Authentication screen with http:// URL

When I access the Winter Bash 2017 and click the log in option in the top bar, I get the following the authentication screen. There the URL for the winter bash 2017 is http://. Can this URL be ...
-10
votes
1answer
54 views

How can SO query's result did not encrypt the id?

What's the reason StackExchange Data explorer website didnt encrypt the id of the query result ? I mean it's just give the result like postId=1 or postId=655011. Does it make the data in SO vulnerable ...
4
votes
1answer
82 views

Is SEDE secure?

The Stack Exchange Data Explorer aka SEDE is not mentioned in Network-wide HTTPS: It's time. It is not listed in any of the steps, which makes sense as it's not officially part of Stack Exchange, ...
14
votes
3answers
150 views

stackpromos.com HTTPS cert is invalid

The certificate presented does not work for stackpromos.com, leading to a warning in my browser about an invalid certificate.
1
vote
0answers
23 views

Certificate invalid? [duplicate]

I'm not sure what caused this, but my Chrome detected the certificate from *.stackexchange.com invalid for discuss.area51.stackexchange.com This is what I've done: Open this user's chat profile page ...
6
votes
0answers
35 views

Unable to translate error message when post contains a non-https image

If you place the following code into the post body: [![text][1]][1] [1]: http://1 you will see an error message: Text of this message is not available to translate via Transifex. All image ...
3
votes
0answers
29 views

Community Promotion Archive is not secured yet

With all of Stack Exchange sites (except chat) fully secured now, one site was forgotten: the community promotion archive. Trying to change to https manually leads to "Your connection is not private" ...
3
votes
0answers
41 views

HTTPS image conversion didn't work for .ico files

In Roadmap to HTTPS: serving and uploading HTTPS-images only, Step 3 said: After this is enabled, old posts that have HTTP images, accessible via HTTPS, will be edited accordingly. This will be ...
8
votes
1answer
88 views

Ugly look on custom error page on chat because of request to HTTP resource

I was visiting some transcripts from a chat room and then I found a link to another room which was removed. On that custom error page, I found two main issues and one was caused by another main issue. ...
1
vote
1answer
118 views

Invalid certificate for https://www.*.stackexchange.com [duplicate]

Stack Exchange will do a permanent redirect from www to non www for all Stack Exchange sites. This works fine without SSL but, with SSL the browser will throw an Insecure Connection error due to the ...
17
votes
0answers
94 views

A bot script needs to be run to convert meta.[site] URLs to [site].meta URLs

The Community bot already ran through posts to convert internal http:// links to https://, which is great, but it needs to be run one more time: this time, it needs to convert links of this format: ...
7
votes
0answers
66 views

Fix http://data.stackexchange.com to https://data.stackexchange.com with Community♦ for correct session handling

If I click on an HTTPS link to https://data.stackexchange.com, I will be identified: But if I click on an HTTP link to http://data.stackexchange.com, I will not be identified: This HTTP issue ...
22
votes
0answers
148 views

Convert http links to https in tag wikis

As part of the migration to HTTPS, a bot rewrote http:// links pointing inside the Stack Exchange network to https://. This bot only ran on questions and answers. Please run the bot on tag wikis as ...
2
votes
0answers
41 views

Still HTTP links in /tour on various sites

<Something> Stack Exchange is a question and answer site for <some people>. It's built and run by you as part of the Stack Exchange network of Q&A sites. With your help, we're working ...
-2
votes
1answer
32 views

Should we force users to post links to SE sites in HTTPS?

Network-wide HTTPS is a good idea. SE devs have been working hard to replace existing HTTP links to HTTPS, and they even batch replaced links in existing posts with the Community bot on May 20[...
5
votes
2answers
88 views

HTTPS certificate error for meta redirect pages (meta.<site>.stackexchange.com)

Visiting https://meta.security.stackexchange.com displays an HTTPS certificate error in Google Chrome and Internet Explorer 10. For reference, meta.<sitename>.stackexchange.com is the old URL ...
3
votes
0answers
30 views

Change links in errors and warnings to HTTPS

Another question here on Meta brought something to my attention. Most links in errors and warnings that come up when posting or editing still are HTTP. I have a few examples listed below from various ...
10
votes
0answers
109 views

Messaging failed, Houston didn't get contacted

In the answer on Which browsers are officially supported, and what else do I need? a link is offered to the Network Login Help page. I'm not sure if that page is still relevant given the changes ...
3
votes
0answers
26 views

When changing profile picture, the current picture is loaded via HTTP

When changing profile picture, a request is made to /users/popup/change-picture/<user-id>, which returns HTML displayed in a popup. This HTML contains an <img> tag with an HTTP link, for ...
5
votes
1answer
76 views

Link to reputation league from profile page is HTTP

The link to reputation leagues from the Activity and Profile tabs are HTTP.
4
votes
1answer
51 views

“View more [accounts]” link on user profile page is HTTP

The "View more" link below the list of accounts on user profile is HTTP instead of HTTPS. Other stackexchange.com links are also HTTP, for example link to the network profile.
5
votes
1answer
53 views

Mixed content error in Network profile - activity tab

In the network profile activity tab, when trying to expand the answered or asked posts, we are getting the following mixed content error: Mixed Content: The page at 'https://stackexchange.com/users/...
5
votes
0answers
45 views

Chat links to Meta sites have been rewritten with invalid HTTPS

Way back in 2015, a feed bot posted a link to a meta question in a chat room. The link was, in those pre-HTTPS days, http://meta.christianity.stackexchange.com/. However, if you click on it, you are ...
6
votes
0answers
46 views

Links to meta in custom close reasons still use old meta URLs

Strongly related to the continued use of non-HTTPS links, if a custom close reason features a link to meta, that link will be Using HTTP instead of HTTPS Using the old format for URLs on meta, meta....
10
votes
1answer
70 views

SEDE magic columns (and site://) do not use HTTPS

Post links generated via the SEDE magic columns (e.g. [Post Link], [Comment Link], etc.) as well as site:// provide HTTP links, but should provide HTTPS links instead. Example query: select (...
9
votes
0answers
41 views

Editor preview resolves title to HTTP links but rendered post does not

The editor and the actual rendering of a post differ in their treatment of post link title expansions for non-HTTPS links. For example, the following: HTTPS: Network-wide HTTPS: It's time HTTP: ...
11
votes
0answers
73 views

Not secure error in the Edit Profile - Applications page

If you are authorized for any applications related to the Stack Exchange sites, it will list the details in the Application menu under the Edit Profile & Settings tab in the main site and Settings ...
3
votes
0answers
49 views

Http link in the side bar after the sites are rolled-out with https

In Ask Question, when you click inside the body section, we can see the How to Format section in the side bar. In the list of tips, the last line is: ► basic HTML also allowed There still the ...
1
vote
0answers
20 views

Inbox notifications link to Area 51 using HTTPS

As indicated in "Network-wide HTTPS: It's time", HTTPS support for Area 51 is currently incomplete. Certain page elements fail to load on HTTPS, such as notifications and captchas. Despite this, ...
2
votes
0answers
50 views

Chat not always HTTPS [duplicate]

Sometimes in the chat rooms, I see a warning icon instead of the normal green lock in Firefox. Looking through the "More Information" area, I see that the site is trying to load http://cdn.sstatic....
3
votes
0answers
47 views

Example newsletter popup displaying as empty page from the edit profile

In the Edit Profile & Settings -> Preferences, under the Newsletter section, the URL for the see an example newsletter is still as http:// only. Clicking on the link it opens a blank popup window. ...
29
votes
1answer
269 views

Announcer badge spike

There has been a recent spike in the number of Announcer badges being awarded on TeX.SE. A query on SEDE highlights this: The last four months saw the occasional awarding of more than one-a-day, with ...
1
vote
1answer
72 views

Why can votes be retracted for posts edited only by the Community user to change to https?

I understand what's written in the answer to "Why isn't the Community bot silent when editing posts that have http://* to https://* for stackexchange sites?", i.e.: edits by the community bot ...
2
votes
1answer
64 views

Why isn't the Community bot silent when editing posts that have http://* to https://* for stackexchange sites?

For example https://unix.stackexchange.com/posts/144821/revisions Why does this show on the post, wouldn't it be better just to show it in the revision log?
4
votes
0answers
32 views

Old combined flair links were not updated from http to https

E.g. if you have an old post that contains a global SE site flair: <a href="http://stackexchange.com/users/947951"> <img src="http://stackexchange.com/users/flair/947951.png" > </a&...
5
votes
1answer
56 views

The “Unable to verify link” got mixed content warning and borked favicon

Stack Exchange use their own advertisement redirection mechanism for various advertisements. When something there goes wrong, they show a friendly error page. Link to reproduce. As you can see, the ...
17
votes
0answers
154 views

Links in close reasons are (sometimes?) still HTTP

TL;DR: Links in off-topic close reasons are not HTTPS. Links to other sites in migration close reasons are not HTTPS. NB: This question is tagged "custom close reasons". Those include both the free-...