Questions tagged [ssl]

HTTPS (TLS, aka SSL) is newly supported on Stack Exchange. Use this tag for remaining bugs.

Filter by
Sorted by
Tagged with
232 votes
2 answers
4k views

HTTPS: It's time

Update: The network move has started, you can follow here: Network-wide HTTPS: It's time This is a heads up, and a request for help. HTTPS for our entire network is long overdue, but we've been ...
Nick Craver's user avatar
122 votes
3 answers
2k views

HTTPS-only images

UPDATE This is now enabled network-wide, more info on mSE: Roadmap to HTTPS: serving and uploading HTTPS-images only As you might've heard, we're working really hard on rolling out HTTPS support ...
m0sa's user avatar
  • 10.7k
89 votes
4 answers
2k views

Should we display a warning when users include images?

I've spent some time in the Triage and First Post review queues and I keep seeing users who include or link to screenshots of their code and/or exceptions and error messages. This is generally ...
MechMK1's user avatar
  • 3,288
76 votes
3 answers
3k views

https://www.stackoverflow.com redirects to insecure http://stackoverflow.com [duplicate]

Not sure if this is the right place to report this, but here are a couple of minor points: If I navigate to https://www.stackoverflow.com it redirects me to http://stackoverflow.com. I would have ...
Joe's user avatar
  • 122k
59 votes
1 answer
385 views

Talent - Company page shows "Connection is Not Secure" error due to the http:// image

In the Stack Overflow Talent - Company page, if you didn't set any Cover Photo, by default it has this image as a cover photo. Due to the http:// image, the Company page shows aConnection is Not ...
Arulkumar's user avatar
  • 13k
52 votes
2 answers
865 views

Mixed content ad

I'm seeing mixed content due to an ad. The offending host is idsync.rlcdn.com while delivering a 1x1 pixel. I believe this is the offending ad. Tracking down these tracking pixels is a little tricky ...
vcsjones's user avatar
  • 139k
49 votes
3 answers
2k views

Is Stack Overflow secure even when not using HTTPS?

I noticed stackoverflow.com doesn't force the use of an HTTPS connection even when the user is logged in. I've found this question on security.stackexchange.com on "Why is Stack Overflow not using ...
Anis LOUNIS aka AnixPasBesoin's user avatar
46 votes
0 answers
388 views

Hot Network Questions are HTTP links when the site itself is served via HTTPS

Links to Hot Network Questions are always HTTP links, even when the site is accessed over HTTPS. This is inconsistent with question links in Linked and Related sections (when Stack Overflow is ...
filhit's user avatar
  • 2,084
44 votes
1 answer
845 views

Ad causing mixed content in HTTPS

Since Stack Overflow is officially HTTPS, I was sad to see a mixed content warning from an ad. Can we fix the ad to use HTTPS too? The offending URL is a tracking pixel in a frame from this ad.
vcsjones's user avatar
  • 139k
44 votes
1 answer
1k views

Why are some pages randomly less secure than others?

I was just browsing Meta when I noticed the following (I was on this post in a different tab when I took the right screenshot), Now this is where the "randomness" comes in. I only get the left ...
Sam's user avatar
  • 7,252
43 votes
0 answers
675 views

Use HTTPS for snippets because some features are HTTPS only

Many features of the browsers are starting to require HTTPS which means they don't work on Stack Overflow snippets. Please consider using HTTPS for Stack Overflow snippets. I recently tried to answer ...
gman's user avatar
  • 101k
38 votes
2 answers
1k views

Is there a way to force enable HTTPS for my account?

I noticed recently (middle of 2015) that Stack Overflow is available over HTTP and HTTPS, and HTTPS works perfectly (no mixed content warnings, etc). Is there a flag I can set for my account to ...
Kevin Burke's user avatar
  • 61.4k
38 votes
1 answer
10k views

A required TLS feature is missing. Error code: MOZILLA_PKIX_ERROR_REQUIRED_TLS_FEATURE_MISSING

Suddenly, today I am having issues connecting to https://stackoverflow.com/ from Firefox: An error occurred during a connection to stackoverflow.com. A required TLS feature is missing. Error code: ...
wilx's user avatar
  • 17.7k
36 votes
0 answers
357 views

Top bar Home icon redirects me to http site

The main site link to home in the top bar is still set to http://stackoverflow.com, even though I manually load the https version. Are also affected all links to SO posts in Inbox, Achievements, and ...
Kaiido's user avatar
  • 124k
32 votes
2 answers
836 views

Why does Stack Overflow's help page say the SSL certificate is issued for footballsupport.geniussports.com?

On the Stack Overflow help page you can see the certificate is issued to a different site. Both Stack Overflow and that site use freshdesk. Does the certificate from freshdesk need to be ...
Shaun Webb's user avatar
32 votes
0 answers
497 views

Certificate error for stackoverflow.help [closed]

When visiting the help center, a banner is displayed: The "Click here »" link points to https://stackoverflow.help/, which when visited redirects to https://www.stackoverflow.help/ and presents a ...
CodeCaster's user avatar
  • 148k
31 votes
1 answer
611 views

Should flair provide HTTPS links by default?

I have seen default to HTTPS links when using Imgur links, https://www.stackoverflow.com redirects to insecure http://stackoverflow.com and HTTPS to Imgur?, but none of them really capture my question,...
iLoveTux's user avatar
  • 3,552
27 votes
1 answer
250 views

The certificate for itr-links.stackoverflow.email has expired

I wanted to change my email address and clicked the link in a newsletter I received, but the server had an expired certificate (roughly 20 hours ago). Shouldn't be a big issue to renew :)
onik's user avatar
  • 1,922
27 votes
0 answers
146 views

Some "http://" links in the election page

In the election page, a few of the links for the badges and MSE sites are still http://, these links can be updated to https:// Screenshot for reference:
Arulkumar's user avatar
  • 13k
25 votes
1 answer
499 views

Why are child meta links flipped after transition to HTTPS?

As seen from this post, Stack Exchange network is transiting to the HTTPS protocol. In the list of things to be done, one item caught my attention: (Child metas) Move from meta.*.stackexchange....
Panda's user avatar
  • 6,955
23 votes
2 answers
404 views

SE Network Login Test Page: "Messaging failed; stackauth.com skipped" - Am I missing something?

While looking for a generic inbox link, I stumbled onto the hidden links page, where a post by @ShadowWizard links to the Network Login Test Page. Here's my test result: SO & SE seem to be ...
ashleedawg's user avatar
  • 20.4k
22 votes
1 answer
378 views

adzerk.net causes mixed content error on main site

It looks like there is an asset loaded from stackoverflow.com that is breaking the HTTPS configuration, causing the site to be flagged with the mixed content warning (hence downgraded to insecure). ...
Simone Carletti's user avatar
21 votes
2 answers
2k views

Certificate error when using stackoverflow.com from certain IP addresses

My company has several wireless networks with different public IP addresses. If I'm connected to one of them, I occasionally get a certificate error when connecting to stackoverflow.com. The ...
KyleM's user avatar
  • 4,455
21 votes
0 answers
392 views

Are notifications of Stack Overflow HTTP-only? [closed]

The hyperlinks of comment and achievement notifications in the navigation bar are using HTTP even if I'm visiting Stack Overflow by HTTPS. Is this something that ought to be fixed or did I miss a ...
Frederick Zhang's user avatar
18 votes
1 answer
533 views

How to make a working snippet with a library not available in HTTPS?

Since Stack Overflow is in HTTPS, I suppose a lot of snippets are not working anymore and returning a "Mixed Content" error. I have this issue with one of my answers: Skipping null values with Morris....
krlzlx's user avatar
  • 5,752
18 votes
1 answer
261 views

Link to chat from Site Switcher is not HTTPS

On the Site Switcher drop down The link to chat is not https. Inspecting the element gives me <div class="related-links"> <a href="https://stackoverflow.com/help" class="js-gps-track" ...
NathanOliver's user avatar
18 votes
0 answers
526 views

Is Stack Overflow updating times on questions, comments, answers more slowly (and not spotting new comments, answers as quickly)?

Are you seeing Stack Overflow show updates to the times on questions, answers and comments — and collecting/displaying new answers and comments and other updates to questions — much more slowly than ...
Jonathan Leffler's user avatar
17 votes
0 answers
383 views

Why doesn't Stack Overflow default to SSL? [duplicate]

Why doesn't http://www.stackoverflow.com redirect to https://www.stackoverflow.com? Is there a reason SSL is not enforced?
Reactgular's user avatar
  • 52.5k
16 votes
1 answer
203 views

Tag images are hard-coded to use http

Steps to reproduce Go to https://stackoverflow.com/questions/tagged/firefox (note the s in https) View source (view-source:https://stackoverflow.com/questions/tagged/firefox, doesn't get converted to ...
0b10011's user avatar
  • 18.4k
15 votes
1 answer
234 views

Bad SSL link on Stack Overflow blog pointing to Stack Overflow Enterprise site

Looks like someone needs a new SSL Cert! Repro is: Go to Stack Overflow Blog. Click on this link in the page footer: Get Stack Overflow Enterprise Expected: fascinating marketing content about ...
Justin Grant's user avatar
  • 44.8k
15 votes
0 answers
662 views

Default to HTTPS links when using imgur links

I use the HTTPS Everywhere extension, and Chrome shows the security warning below: If you open the browser console you'll see that the culprit are imgur links. What is the state of HTTPS support? A ...
Dan Dascalescu's user avatar
11 votes
0 answers
282 views

Should protocol-relative URLs be disallowed in profile "About me"?

Unexpected error message when opening “About me” for editing: All image URLs must start with https:// This is triggered by the existing protocol-relative URLs in the “About me” text for my user ...
MetaEd's user avatar
  • 3,753
10 votes
2 answers
677 views

Wikipedia links not https, is there a special reason they shouldn't?

While editing this answer to a generic question, I was adding Wikipedia links, I noticed that the other existing (also Wikipedia) links where all HTTP, though mine were HTTPS. Shouldn't they have ...
Pac0's user avatar
  • 21.5k
9 votes
0 answers
76 views

Not Secure error in Stack Overflow for Teams Help Center page [closed]

In the Stack Overflow Teams -> Following and watching tags page, due to few http:// images the page received the Connection is Not Secure error. The http:// images are: https://i.stack.imgur.com/...
Arulkumar's user avatar
  • 13k
9 votes
0 answers
324 views

Periodic SSL cert errors

Once or twice a day I get this error, it persists for 5 minutes or so and eventually resolves itself: The owner of stackoverflow.com has configured their website improperly. To protect your ...
Jasen's user avatar
  • 11.9k
9 votes
0 answers
346 views

Support https searches in opensearch.xml

I was trying to add search providers to Microsoft Edge. I know StackOverflow supports OpenSearch so I tried to add it. However, I get an error message saying the search template is not using a secure ...
ZippyV's user avatar
  • 12.6k
9 votes
0 answers
94 views

Make share URLs of questions and answers use HTTPS by default or based on loading protocol

I like to visit sites via HTTPS if possible and use HTTPS Everywhere to enforce. I was pretty surprised to see that links that I copied from the "share" box didn't use HTTPS but only HTTP. This could ...
Daniel Böhmer's user avatar
8 votes
2 answers
318 views

Improper HTTPS - Connection only partially encrypted [closed]

When I access Stack Overflow via HTTPS, my browser (Firefox) complains that not all elements (images) of the web page portal are loaded via HTTPS, leading to some insecurity. Can this be fixed please?
jotik's user avatar
  • 17.1k
8 votes
1 answer
198 views

rads.stackoverflow.com links are not HTTPS

I find two HTTPS-related issues. I hope these can be improved: Links to Amazon are automatically converted to a rewritten URL: http://rads.stackoverflow.com/amzn/click/<id>, like this. This ...
X. Liu's user avatar
  • 1,070
7 votes
0 answers
168 views

HTTPS Pages Not Loading [closed]

Pages requested over HTTPS (https://stackoverflow.com/, https://stackoverflow.com/a/23964427/1084749, etc) are not loading for me. In both Safari (logged in to SO) and Firefox (not), the browser just ...
nobody's user avatar
  • 19.8k
6 votes
1 answer
97 views

Developer story company logo is not served over HTTPS

My developer story is insecure! The cause is the HP logo, which is linked using HTTP: http://public.crunchbase.com/….jpg The logo is coming from the built-in company picker, and the UI does not ...
Kobi's user avatar
  • 135k
6 votes
1 answer
52 views

User profile link on help center page uses http instead of https

I suppose all links to the Stack Exchange Network should be in HTTPS. Obviously this one in the MCVE help page was forgotten. Click to see full image Looks like this user specifically likes HTTP :)
iBug's user avatar
  • 35.6k
6 votes
0 answers
52 views

Link to meta is http in the main site's ask questions page

In the main site Ask Question, in the How to Ask side bar, the link to meta site is http:// only. The tip in the side bar is: If your question is about this website, ask it on meta instead. This ...
Arulkumar's user avatar
  • 13k
6 votes
0 answers
92 views

Why am I getting: "stackoverflow.com connection is untrusted "alerts?

When trying to reach www.stackoverflow.com domain I'm getting warnings both in Chrome: and Firefox: Why am I getting these alerts? How do you know if the issue, whatever it may be, is on their end ...
Laniakea's user avatar
  • 884
5 votes
1 answer
409 views

Why do I get untrusted certificate error for Stack Overflow? [duplicate]

I face this error only in Google Chrome (version 33.0.1750.146 m), not in Firefox on the same system. Because of the problem I couldn't sign in to my account and I don't face this error with other ...
Venky's user avatar
  • 559
5 votes
0 answers
130 views

Mixed content due to ads

There is mixed (https and http) content appearing occasionally to me. It seems to appear at the same time, but maybe not always as it couldn't catch it again a couple of days ago when I first noticed ...
Andrew Morton's user avatar
5 votes
0 answers
292 views

HTTPs by default [duplicate]

I am not sure how I missed this before, but when navigating to SO or other SE sites, it does not use HTTPs by default. Has this always been the case? Why does the site not redirect to HTTPs ...
mydoghasworms's user avatar
4 votes
1 answer
59 views

Links in job matches email are not https yet

Three links in the email sent with new jobs matches are still not https: Stack Overflow logo, links to http://stackoverflow.com/ "See more jobs", links to http://stackoverflow.com/jobs?sort=p&...
Shadow The GPT Wizard's user avatar
4 votes
1 answer
381 views

CDN js+css sometimes fails to load over https

Lately I've been continuously experiencing malfunctions of the site when browsing with HTTPS. The urls https://cdn.sstatic.net/Js/stub.en.js?v=178f8ec7cc80 and https://cdn.sstatic.net/stackoverflow/...
Bergi's user avatar
  • 632k
4 votes
0 answers
496 views

stackoverflow.com is not working [closed]

Any idea why is stackoverflow not working? Normal mode: Incognito mode + certificate:
HABJAN's user avatar
  • 9,222