Questions tagged [ssl]
HTTPS (TLS, aka SSL) is newly supported on Stack Exchange. Use this tag for remaining bugs.
75
questions
22
votes
1
answer
413
views
adzerk.net causes mixed content error on main site [closed]
It looks like there is an asset loaded from stackoverflow.com that is breaking the HTTPS configuration, causing the site to be flagged with the mixed content warning (hence downgraded to insecure).
...
23
votes
2
answers
416
views
SE Network Login Test Page: "Messaging failed; stackauth.com skipped" - Am I missing something?
While looking for a generic inbox link, I stumbled onto the hidden links page, where a post by @ShadowWizard links to the Network Login Test Page.
Here's my test result:
SO & SE seem to be ...
4
votes
1
answer
66
views
Links in job matches email are not https yet [closed]
Three links in the email sent with new jobs matches are still not https:
Stack Overflow logo, links to http://stackoverflow.com/
"See more jobs", links to http://stackoverflow.com/jobs?sort=p&...
8
votes
2
answers
338
views
Improper HTTPS - Connection only partially encrypted [closed]
When I access Stack Overflow via HTTPS, my browser (Firefox) complains that not all elements (images) of the web page portal are loaded via HTTPS, leading to some insecurity. Can this be fixed please?
16
votes
1
answer
228
views
Tag images are hard-coded to use http
Steps to reproduce
Go to https://stackoverflow.com/questions/tagged/firefox (note the s in https)
View source (view-source:https://stackoverflow.com/questions/tagged/firefox, doesn't get converted to ...
75
votes
3
answers
3k
views
https://www.stackoverflow.com redirects to insecure http://stackoverflow.com [duplicate]
Not sure if this is the right place to report this, but here are a couple of minor points:
If I navigate to https://www.stackoverflow.com it redirects me to http://stackoverflow.com.
I would have ...
1
vote
0
answers
199
views
Browser intermittently complains about Stack Overflow's SSL certificate
It's now happened several times lately that when I attempt to visit https://stackoverflow.com, Firefox gives me this page:
Did Not Connect: Potential Security Issue
Firefox detected a potential ...
2
votes
0
answers
64
views
Update links on "how to ask" page from http to https
The "How to ask" page currently lists http://sqlfiddle.com/ and http://jsbin.com/ as recommended external sites to create live code examples:
If it is possible to create a live example of ...
1
vote
2
answers
2k
views
Stack Overflow SSL certificate appears invalid to my browser
I have been facing this issue for the past few days. Whenever I try to open Stack Overflow, it shows the connection is not private and when I click on the access unsafe button given down below, it ...
38
votes
1
answer
11k
views
A required TLS feature is missing. Error code: MOZILLA_PKIX_ERROR_REQUIRED_TLS_FEATURE_MISSING
Suddenly, today I am having issues connecting to https://stackoverflow.com/ from Firefox:
An error occurred during a connection to stackoverflow.com. A required TLS feature is missing. Error code: ...
26
votes
1
answer
255
views
The certificate for itr-links.stackoverflow.email has expired
I wanted to change my email address and clicked the link in a newsletter I received, but the server had an expired certificate (roughly 20 hours ago). Shouldn't be a big issue to renew :)
5
votes
0
answers
147
views
Mixed content due to ads
There is mixed (https and http) content appearing occasionally to me.
It seems to appear at the same time, but maybe not always as it couldn't catch it again a couple of days ago when I first noticed ...
2
votes
0
answers
221
views
Stack Exchange sites: connection is not private in Chrome Browser [closed]
After installing the Windows OS and the latest version of Google Chrome yesterday, and even after enabling the HTTPS Everywhere addon, I'm getting "Your connection is not private".
But in Firefox it ...
46
votes
0
answers
389
views
Hot Network Questions are HTTP links when the site itself is served via HTTPS
Links to Hot Network Questions are always HTTP links, even when the site is accessed over HTTPS.
This is inconsistent with question links in Linked and Related sections (when Stack Overflow is ...
18
votes
1
answer
539
views
How to make a working snippet with a library not available in HTTPS?
Since Stack Overflow is in HTTPS, I suppose a lot of snippets are not working anymore and returning a "Mixed Content" error.
I have this issue with one of my answers: Skipping null values with Morris....
89
votes
4
answers
2k
views
Should we display a warning when users include images?
I've spent some time in the Triage and First Post review queues and I keep seeing users who include or link to screenshots of their code and/or exceptions and error messages. This is generally ...
5
votes
1
answer
436
views
Why do I get untrusted certificate error for Stack Overflow? [duplicate]
I face this error only in Google Chrome (version 33.0.1750.146 m), not in Firefox on the same system.
Because of the problem I couldn't sign in to my account and I don't face this error with other ...
3
votes
0
answers
89
views
Why does Stack Overflow not redirect to HTTPS if I am logged in? [duplicate]
I often open Stack Overflow from result of search engine. Unfortunately the search engine, let name it G**g**, set the link to http instead of https. I expect Stack Overflow to redirect to HTTPS ...
59
votes
1
answer
388
views
Talent - Company page shows "Connection is Not Secure" error due to the http:// image
In the Stack Overflow Talent - Company page, if you didn't set any Cover Photo, by default it has this image as a cover photo. Due to the http:// image, the Company page shows aConnection is Not ...
3
votes
0
answers
581
views
stackoverflow.com is not working [closed]
Any idea why is stackoverflow not working?
Normal mode:
Incognito mode + certificate:
2
votes
0
answers
95
views
SO no working - Certificate problem? [duplicate]
Anybody else experience this when going to stackoverflow.com?
51
votes
2
answers
880
views
Mixed content ad
I'm seeing mixed content due to an ad.
The offending host is idsync.rlcdn.com while delivering a 1x1 pixel.
I believe this is the offending ad. Tracking down these tracking pixels is a little tricky ...
2
votes
0
answers
149
views
Not entering to Stack Overflow using Firefox on Windows
Up to the last hour, everything is good; I can enter and use Stack Overflow without any hassle, but suddenly now I'm not able to enter this site using Mozilla Firefox, see the below image:
but on ...
32
votes
2
answers
840
views
Why does Stack Overflow's help page say the SSL certificate is issued for footballsupport.geniussports.com?
On the Stack Overflow help page you can see the certificate is issued to a different site.
Both Stack Overflow and that site use freshdesk. Does the certificate from freshdesk need to be ...
9
votes
0
answers
78
views
Not Secure error in Stack Overflow for Teams Help Center page [closed]
In the Stack Overflow Teams -> Following and watching tags page, due to few http:// images the page received the Connection is Not Secure error.
The http:// images are:
https://i.sstatic.net/...
31
votes
0
answers
502
views
Certificate error for stackoverflow.help [closed]
When visiting the help center, a banner is displayed:
The "Click here »" link points to https://stackoverflow.help/, which when visited redirects to https://www.stackoverflow.help/ and presents a ...
10
votes
2
answers
692
views
Wikipedia links not https, is there a special reason they shouldn't?
While editing this answer to a generic question, I was adding Wikipedia links, I noticed that the other existing (also Wikipedia) links where all HTTP, though mine were HTTPS.
Shouldn't they have ...
6
votes
1
answer
53
views
User profile link on help center page uses http instead of https
I suppose all links to the Stack Exchange Network should be in HTTPS. Obviously this one in the MCVE help page was forgotten.
Click to see full image
Looks like this user specifically likes HTTP :)
6
votes
0
answers
57
views
Link to meta is http in the main site's ask questions page
In the main site Ask Question, in the How to Ask side bar, the link to meta site is http:// only.
The tip in the side bar is:
If your question is about this website, ask it on meta instead.
This ...
20
votes
2
answers
2k
views
Certificate error when using stackoverflow.com from certain IP addresses
My company has several wireless networks with different public IP addresses. If I'm connected to one of them, I occasionally get a certificate error when connecting to stackoverflow.com.
The ...
8
votes
1
answer
221
views
rads.stackoverflow.com links are not HTTPS
I find two HTTPS-related issues. I hope these can be improved:
Links to Amazon are automatically converted to a rewritten URL: http://rads.stackoverflow.com/amzn/click/<id>, like this. This ...
3
votes
0
answers
67
views
Replace http links in tag wikis to https
As Stack Overflow moved to https and migrated all http to https links in questions and answers (cf. HTTPS: It's time), links to stackoverflow.com on tag info pages were not yet migrated.
When ...
9
votes
0
answers
332
views
Periodic SSL cert errors
Once or twice a day I get this error, it persists for 5 minutes or so and eventually resolves itself:
The owner of stackoverflow.com has configured their website improperly. To protect your ...
11
votes
0
answers
291
views
Should protocol-relative URLs be disallowed in profile "About me"?
Unexpected error message when opening “About me” for editing:
All image URLs must start with https://
This is triggered by the existing protocol-relative URLs in the “About me” text for my user ...
27
votes
0
answers
147
views
Some "http://" links in the election page
In the election page, a few of the links for the badges and MSE sites are still http://, these links can be updated to https://
Screenshot for reference:
3
votes
0
answers
95
views
Not secure error in the election page
In the election page, there is Connection is Not Secure error occurred due to the images.
On the high level, when I was checked all the user accounts displayed on the page were https://, so when ...
43
votes
1
answer
847
views
Ad causing mixed content in HTTPS
Since Stack Overflow is officially HTTPS, I was sad to see a mixed content warning from an ad.
Can we fix the ad to use HTTPS too?
The offending URL is a tracking pixel in a frame from this ad.
2
votes
1
answer
168
views
Has the community bot changed too much in changing HTTP links to HTTPS?
I have asked a question here. I could swear at the time the following URLs are replaced by the actual title. (Which my simple test of copying a URL into this question confirms).
After the change from ...
121
votes
3
answers
2k
views
HTTPS-only images
UPDATE
This is now enabled network-wide, more info on mSE:
Roadmap to HTTPS: serving and uploading HTTPS-images only
As you might've heard, we're working really hard on rolling out HTTPS support ...
18
votes
1
answer
261
views
Link to chat from Site Switcher is not HTTPS
On the Site Switcher drop down
The link to chat is not https. Inspecting the element gives me
<div class="related-links">
<a href="https://stackoverflow.com/help" class="js-gps-track" ...
6
votes
1
answer
97
views
Developer story company logo is not served over HTTPS
My developer story is insecure!
The cause is the HP logo, which is linked using HTTP: http://public.crunchbase.com/….jpg
The logo is coming from the built-in company picker, and the UI does not ...
2
votes
0
answers
46
views
HTTPS share link redirects to HTTP (not HTTPS) full link [duplicate]
It would probably make sense to keep the user on HTTPS version of StackOverflow when he opens an HTTPS short URL like https://stackoverflow.com/a/12345678.
Currently, the user is automatically ...
1
vote
0
answers
53
views
Why does the Stack Overflow logo link not retain https if that is what the user is using? [duplicate]
You can use Stack Overflow over TLS by prefixing https:// to any URL on the domain. This works well, and any links on the site are structured to retain https.
That is except for the logo. If you ...
1
vote
0
answers
39
views
I start using Stack Overflow over HTTPS, and later it switches to HTTP [duplicate]
I start using Stack Overflow by going to https://stackoverflow.com. All is well. However, if I then click the Stack Overflow "Top Questions" button in the toolbar (Stack Overflow logo), that ...
3
votes
0
answers
95
views
Http flair link
The Normal Flair links are set to http, not https. Shouldn't that be changed?
36
votes
0
answers
357
views
Top bar Home icon redirects me to http site
The main site link to home in the top bar is still set to http://stackoverflow.com, even though I manually load the https version.
Are also affected all links to SO posts in Inbox, Achievements, and ...
232
votes
2
answers
4k
views
HTTPS: It's time
Update: The network move has started, you can follow here: Network-wide HTTPS: It's time
This is a heads up, and a request for help.
HTTPS for our entire network is long overdue, but we've been ...
25
votes
1
answer
501
views
Why are child meta links flipped after transition to HTTPS?
As seen from this post, Stack Exchange network is transiting to the HTTPS protocol.
In the list of things to be done, one item caught my attention:
(Child metas) Move from meta.*.stackexchange....
49
votes
3
answers
2k
views
Is Stack Overflow secure even when not using HTTPS?
I noticed stackoverflow.com doesn't force the use of an HTTPS connection even when the user is logged in.
I've found this question on security.stackexchange.com on "Why is Stack Overflow not using ...
15
votes
1
answer
237
views
Bad SSL link on Stack Overflow blog pointing to Stack Overflow Enterprise site
Looks like someone needs a new SSL Cert! Repro is:
Go to Stack Overflow Blog.
Click on this link in the page footer: Get Stack Overflow Enterprise
Expected: fascinating marketing content about ...