10

I have noticed for the past week or so that I'm often surprisingly "logged out" of SO and other SE network sites.

Additionally, even when I log in I'm on an HTTP, not HTTPS, connection. When I try to force HTTPS by adding the 's' into the protocol, Firefox shows the warning icon and comments that "This website does not supply ownership information."

Might connections to Stack Overflow be subject to a Man In The Middle attack?

Interestingly, I've noticed this from both my work machine and my home machine, which are on different ISPs.

5
  • 5
    Independently of whether there was a MITM attack, "This website does not supply ownership information" is not necessarily a problem (see this question). It's the following message in that box that indicates a problem: "The connection to this website is not fully secure because it contains unencrypted elements [...]". That's just due to mixed content, which shouldn't be there when HTTPS is implemented properly. See this too (in particular "status-planned").
    – Bruno
    Aug 16, 2014 at 18:28
  • 1
    Sounds like you might be having the same problem I reported here: meta.stackoverflow.com/questions/267977/…. Aug 16, 2014 at 18:51
  • @Bruno, Reto: Thanks. That is very likely the cause.
    – dotancohen
    Aug 17, 2014 at 7:12
  • I've noticed the same behaviour, in my case it's because I had stackauth.com cookies white listed, but the authorization cookies are now coming from stackoverflow.com
    – Jos Vinke
    Aug 18, 2014 at 10:09
  • I don't know if this is related, but the network-wide login doesn't work for me as of yesterday...
    – user2629998
    Aug 18, 2014 at 12:31

0

You must log in to answer this question.

Browse other questions tagged .