Questions tagged [ssl]

HTTPS (TLS, aka SSL) is newly supported on Stack Exchange. Use this tag for remaining bugs.

Filter by
Sorted by
Tagged with
1
vote
1answer
109 views

Links in Stack Exchange security website

I recently found this website: https://stackexchange.com/about/security I noticed this: I don't think that's how the link is supposed to be shown. Please fix it. Also, I noticed some HTTP links. ...
13
votes
0answers
86 views

Changing http to https and mobile links for Wikipedia

Many old posts with links to Wikipedia articles contain http rather than https links. As far as I can tell, it is better to have https link rather than http. (After all, internal links have been ...
2
votes
0answers
82 views

Certificate Error on Stack Overflow [duplicate]

Every time I open Stack Overflow this happens. But on my laptop it's working fine. This is just only on my PC.
23
votes
2answers
784 views

Invalid certificate on all SE sites

Sometime this morning my browsers started blocking all Stack Exchange sites with the following error: Your connection is not private Attackers might be trying to steal your information from workplace....
9
votes
0answers
95 views

The SSL certificate for the archived Stack Exchange Gaming Blog is invalid

I tried to visit the Stack Exchange Gaming Blog's archive today but was greeted by a classic SSL warning. Turns out, the certificate behind https://blog.gaming.stackexchange.com/ is invalid as it is ...
9
votes
0answers
130 views

Allow to translate http to https migration revision text

Is it possible to make string like this one in revision list: replaced http://ru.stackoverflow.com/ with https://ru.stackoverflow.com/ translatable via standard SE translation mechanism? I suppose ...
44
votes
0answers
191 views

Can the http://meta.stackexchange.com/ in the Community user’s network profile page be changed to https://…?

The network profile of the Community user, mentions http://meta.stackexchange.com/. Can this be changed to https://meta.stackexchange.com? On copying and browsing it is automatically redirected to ...
23
votes
1answer
103 views

Images section in editing help page contains only "http://" examples

In editing help page, in "Images" section there are few examples with the URL. All the URLs are with the http:// only. When tried those example in the editor we received the "All image ...
0
votes
0answers
44 views

Meta.*.stackexchange.com sitewise certificate issue [duplicate]

There is a bug where I see a privacy error on all meta.foo.stackexchange.com sites. For example, if I try to enter meta.retrocomputing.stackexchange.com into my browser, I get this warning: Can ...
2
votes
0answers
34 views

Incorrect certificate on hatdash.com / blog.gaming.stackexchange.com [duplicate]

It looks like hatdash.com was used during the 2011 Hat Dash. Both of these links use certificates that are invalid for their domains, making the site show as insecure.
7
votes
0answers
51 views

License links are not HTTPS in README files of Developer Surveys

I was having a look at the 2020 Stack Overflow Developer Survey Results and noticed that the license links in README_2020.txt are not HTTPS. The links seem to be the same in the previous surveys too. ...
20
votes
1answer
141 views

Certificate Expired on SEDE

It looks like the SSL certificate for data.stackexchange.com just expired. If you were in the middle of running queries you would be greeted with: Something unexpected went wrong while running ...
76
votes
1answer
2k views

Let's Encrypt certificate issue requiring urgent renewal

Stack Exchange's certificates are in need of renewal ASAP due to the Let's Encrypt CAA rechecking bug. They have sent out notification emails to affected users but I'm reporting this here just in case....
3
votes
0answers
109 views

Ubuntu manpages oneboxing has broken, insecure icon

Oneboxing from the Ubuntu man pages site appears to be using a broken, insecure icon: The broken link is http://manpages.ubuntu.com/favicon.ico. Not only is it attempting to load the icon ...
322
votes
5answers
23k views

TLS 1.0 and TLS 1.1 removal for Stack Exchange services

Update (2020-02-13): This change was completed last night on the Fastly side. Most of our endpoints now have TLS 1.0 and 1.1 disabled. We’ll be addressing our direct load balancers next. Update (2020-...
3
votes
1answer
123 views

Picture are not shown in all Stack Exchange sites [duplicate]

This is a screen shoot of SE I took from here. That's mine. But mine or others are the same, not working, no image is shown. That's makes it difficult for me to understand a topic. I have tried with ...
18
votes
1answer
224 views

StackExchange's OAuth login broken - identifying an HTTPS request as non-HTTPS

Recently (as in, the last few hours - however, it may have been broken for a few days), I've been unable to login via Stack Exchange for a third party application with Stack Exchange's OAuth support. ...
6
votes
1answer
143 views

HTTP -> HTTPS script didn't change everything [duplicate]

In 2017 the network decided to implement the HTTPS protocol, as was announced in Network-wide HTTPS: It's time. Although that post isn't completely marked as status-completed I think most, if not ...
2
votes
0answers
52 views

Chat makes old per-site meta links HTTPS and broken

I was looking at an old chatroom when I found a link from a feed that was from before per-site metas switched from meta.%.stackexchange.com to %.meta.stackexchange.com. This link, however, was changed ...
6
votes
1answer
86 views

URL link issue in data explorer tutorial page

There is an issue with a URL, in one of the Data Explorer tutorial pages. In the Tutorial -> Next Steps page, I can see the following description You can find some interesting queries in this list ...
5
votes
0answers
165 views

Firefox won't open Stack Exchange sites due to "TLS FEATURE MISSING" [duplicate]

I'm running Firefox Quantun, 67.0 (64 bit) on macOS Mojave and it won't load any of the Stack Exchange sites and instead shows a "Secure Connection Failed" page with error code: ...
3
votes
0answers
49 views

Stack Exchange sites currently do not work in Firefox due to broken OCSP stapling [duplicate]

As of a few minutes (hours?) ago, all SE sites except chat present a TLS error in Firefox: An error occurred during a connection to superuser.com. A required TLS feature is missing. Error code: ...
21
votes
1answer
432 views

Is anybody else having PKI problems connecting using Firefox 67.0?

I suddenly started getting the following error message when using Firefox to access Stack Exchange sites: An error occurred during a connection to math.stackexchange.com. A required TLS feature is ...
12
votes
0answers
60 views

Help has non-HTTPS links in it

Pages within the help center have many non-HTTPS links on them. Many of the ones to questions seem to have been updated, but there are non-HTTPS links to the Stack Overflow blog on Don't Ask, links ...
35
votes
2answers
353 views

foo.com is sketchy; “How to Format” and help should use HTTPS links in examples

In the “How to Format” bar that shows when editing the body of a question or editing an answer, there is this example for how to format: <http://foo.com> [foo](http://foo.com) <a href="http:/...
4
votes
0answers
42 views

Community should add HTTPS to Chat links

Community changed all links to stackexchange.com and stackoverflow.com to HTTPS a while ago. However, it seems to have not done this to links to chat.stackexchange.com, as seen in this search, this ...
10
votes
0answers
107 views

Community user profile has a non-HTTPS link

I was recently reading about Community, when I noticed this ironic, very minor, problem in its profile: the link to an answer in its profile is not HTTPS. However, Stack Exchange moved to HTTPS almost ...
10
votes
2answers
113 views

Banners of questions migrated from per-site metas prior to HTTPS changeover link to the origin site's old URL, resulting in certificate error

I was browsing through the question Favicon of Earth Science and Spanish are too similar (exactly the same in HNQ list) which got migrated from Earth Science Meta: As you see, the link points to ...
2
votes
0answers
96 views

Uploader in Chat doesn't use HTTPS

In the uploader in Chat, when putting an image on Stack Imgur from the web, it doesn't make the link it puts in the message use HTTPS. Here is an example of the uploader doing this. This should be ...
5
votes
0answers
53 views

Error message for HTTP image sometimes flows over into preview

When editing a post with an embedded HTTP image (example), you'll see an error message asking you to upload it to imgur or specify an HTTPS URL: However, the lack of a line break after the image in ...
3
votes
0answers
102 views

Got invalid certificate error trying to log in [closed]

I got an invalid certificate error for stackauth.com a few minutes ago when trying to log in to SuperUser via Google. I tried again (after taking a screenshot and blacking out the potentially ...
2
votes
0answers
82 views

SSL Certificate Error on stackapps.com

When checking to see if there is a meta for stackapps.com I found out that there is none (and a different Panda photo than I'm used to seeing). Also there's an SSL certificate error. This is probably ...
6
votes
0answers
100 views

"Connection is not secure" error in some of the promotion pages

The following promotion pages are with the "Connection is not secure" error. https://contests.stackoverflow.com/promos/1 https://contests.stackoverflow.com/promos/2 https://contests.stackoverflow....
4
votes
0answers
144 views

"Connection is not secure" error in all the stackexchange.com pages

In the StackExchange.com and in the all sub pages, I'm receiving the Connection Is Not Secure error. Screenshot for reference:
5
votes
0answers
46 views

OpenID login on SEDE over HTTP is broken, doesn't show error [closed]

I was trying to log into SEDE using the Stack Exchange OpenID function. However, without any erros, I kept not being logged in. Eventually, I discovered I was using the HTTP to connect to SEDE, not ...
10
votes
0answers
105 views

Archived Arqade Blog Overflow gets certificate error

http://blog.gaming.stackexchange.com/2012/08/identifying-games-when-you-cant-remember-the-name/ redirects to https://blog.gaming.stackexchange.com/2012/08/identifying-games-when-you-cant-remember-the-...
12
votes
1answer
265 views

Non-HTTPS images are still served in some cases

Regarding the announcement from last March, Roadmap to HTTPS: serving and uploading HTTPS-images only, has there been a recent change to this policy? Non-HTTPS images are being displayed on some posts....
8
votes
2answers
183 views

Old HTTP links to SE sites without ending / weren't converted to HTTPS links

About a year ago, several migration scripts were run to change old HTTP network-internal links across the network to HTTPS links. However, it appears that the script didn't modify links that lack the ...
9
votes
1answer
121 views

Why doesn't Area 51 use HTTPS by default?

On the page https://stackexchange.com/sites, there is a link to Area 51. This link doesn't use HTTPS and Area 51 doesn't redirect to the HTTPS page.
12
votes
0answers
101 views

Don't allow embedded images from non-HTTPS sources in chat

Quite often, I see a mixed content warning when looking at an SE chat room: This is typically caused by images linked in chat hosted on an HTTP source, not an HTTPS one like the SE Imgur account. ...
5
votes
0answers
64 views

"How to not be a spammer" help page contains badly-rendered HTTP link on all sites

See the image below. The link to the Meta post is not in HTTPS on all sites (including SO, SU, SF, AU), at this page: https://*.stackexchange.com/help/promotion As I tweaked in the F12 Developer ...
6
votes
1answer
393 views

CAPTCHA doesn't present words

I know there's a new invisible form of CAPTCHA, but I'm not sure what words should be entered. Am I missing something? Browser logs: This may or may not be due to the HTTPS issue reported in ...
14
votes
1answer
47 views

Questions migrated from the meta site get the wrong link to the original question

See for example Why is there a module for version 9 of core? migrated to Drupal Answers from its meta site. The link given in migrated from meta.drupal.stackexchange.com Oct 19 '13 at 16:40 points to ...
8
votes
1answer
130 views

Winter Bash 2017 : Authentication screen with http:// URL

When I access the Winter Bash 2017 and click the log in option in the top bar, I get the following the authentication screen. There the URL for the winter bash 2017 is http://. Can this URL be ...
-10
votes
1answer
63 views

How can SO query's result did not encrypt the id?

What's the reason StackExchange Data explorer website didnt encrypt the id of the query result ? I mean it's just give the result like postId=1 or postId=655011. Does it make the data in SO vulnerable ...
4
votes
1answer
98 views

Is SEDE secure?

The Stack Exchange Data Explorer aka SEDE is not mentioned in Network-wide HTTPS: It's time. It is not listed in any of the steps, which makes sense as it's not officially part of Stack Exchange, ...
14
votes
3answers
157 views

stackpromos.com HTTPS cert is invalid

The certificate presented does not work for stackpromos.com, leading to a warning in my browser about an invalid certificate.
1
vote
0answers
30 views

Certificate invalid? [duplicate]

I'm not sure what caused this, but my Chrome detected the certificate from *.stackexchange.com invalid for discuss.area51.stackexchange.com This is what I've done: Open this user's chat profile page ...
8
votes
0answers
46 views

Unable to translate error message when post contains a non-https image

If you place the following code into the post body: [![text][1]][1] [1]: http://1 you will see an error message: Text of this message is not available to translate via Transifex. All image ...
3
votes
0answers
30 views

Community Promotion Archive is not secured yet

With all of Stack Exchange sites (except chat) fully secured now, one site was forgotten: the community promotion archive. Trying to change to https manually leads to "Your connection is not private" ...

1
2 3 4 5 6