All Questions
13 questions
28
votes
0
answers
287
views
Let’s Encrypt chain of trust changes will affect a small number of users on Stack Exchange
tl;dr: As early as September 9th, some users accessing the site from old Android devices (running Android 7.0 and earlier) may see SSL warnings in their browser regarding an invalid certificate when ...
- 10.5k
10
votes
0
answers
449
views
SSL certificate OCSP verification issue on cdn.sstatic.net, SO's JS/CSS not loading
Since the beginning of July I have intermittent trouble loading SO because I randomly can't verify the CDN's SSL certificate through OCSP. Network connectivity is otherwise good (traceroute & ping ...
- 373
8
votes
0
answers
105
views
Time to upgrade SSL Cert(s) on *stackexchange.com
When browsing any StackExchange site, my Firefox console displays this warning:
This site makes use of a SHA-1 Certificate; it's recommended you use certificates with signature algorithms that use ...
- 1,584
5
votes
0
answers
66
views
Opt-out of being logged-in without SSL [closed]
For me at least, partial SSL support with mixed content has been working for a long time. I'm aware that the SSL rollout is a slow process, but whenever I'm connected without an ‘s’ after the ‘http’, ...
- 305
4
votes
1
answer
154
views
Is something wrong with the stack exchange root certificate? [duplicate]
Possible Duplicate:
Better HTTPS support for Stack Exchange sites
I usually visit Stackoverflow through https. Since a few days, Safari will warn me that it can't verify the identity of the ...
- 143
3
votes
1
answer
173
views
Picture are not shown in all Stack Exchange sites [duplicate]
This is a screen shoot of SE I took from here. That's mine. But mine or others are the same, not working, no image is shown. That's makes it difficult for me to understand a topic. I have tried with ...
- 131
3
votes
1
answer
39
views
User flair image should be served over SSL as well
Unfortunately, the current flair image is only served over plain HTTP. Naturally, if you embed it directly on a page served over SSL, you will get mixed content warning from your browser.
Please ...
- 17.2k
3
votes
0
answers
44
views
Bad SSL/TLS at Stack Exchange: Cloudflares SSL certificates and sometimes no HTTPS at all [duplicate]
Cloudflare
Cloudflare has the options Universal/Flexible SSL, which basically allow websites to serve their website over HTTPS by using a certificate from Cloudflare.
Besides the fact that ...
- 131
2
votes
2
answers
448
views
Is Stack Overflow's (SSL) log-in process optimal from a UX perspective? [duplicate]
Does Stack Overflow use SSL when transmitting passwords during the log-in process? This question comes up when you log-on, because there is no green lock in the browser when logging in.
I do use the ...
user233836
1
vote
0
answers
119
views
Generated code does not respect correct protocol (eg. HTTPS) [duplicate]
Browsing StackOverflow, I've found out, that not all resources are loaded over HTTPS (if using that protocol)
Looking into code, I've found out, it's related to Imgur addresses:
view-source:https:/...
- 365
0
votes
0
answers
26
views
Connection downgraded to http after authenticating with SSL, auth broken with HTTP Everywhere [duplicate]
I opened https://meta.stackoverflow.com/, authenticated using Google OpenID, and was returned to https://meta.stackoverflow.com/
When using HTTPS Everywhere, authentication fails because of this:
...
- 1,073
-9
votes
1
answer
274
views
Please support HTTPS by default [duplicate]
Please redirect to an HTTPS connection by default on stackoverflow.com
To illustrate the problem, please see the screenshot below where a man-in-the-middle attack is being used to forge responses ...
- 344
-17
votes
1
answer
139
views
Why hadn't SE had HTTPS for a long time?
I'm novice in security, but after reading the post Network-wide HTTPS: It's time I'm confused. As in the answer of Better HTTPS support for Stack Exchange sites, having an SSL certificate is not ...
- 6,016