Questions tagged [ssl]
HTTPS (TLS, aka SSL) is newly supported on Stack Exchange. Use this tag for remaining bugs.
75
questions
232
votes
2
answers
4k
views
HTTPS: It's time
Update: The network move has started, you can follow here: Network-wide HTTPS: It's time
This is a heads up, and a request for help.
HTTPS for our entire network is long overdue, but we've been ...
122
votes
3
answers
2k
views
HTTPS-only images
UPDATE
This is now enabled network-wide, more info on mSE:
Roadmap to HTTPS: serving and uploading HTTPS-images only
As you might've heard, we're working really hard on rolling out HTTPS support ...
89
votes
4
answers
2k
views
Should we display a warning when users include images?
I've spent some time in the Triage and First Post review queues and I keep seeing users who include or link to screenshots of their code and/or exceptions and error messages. This is generally ...
76
votes
3
answers
3k
views
https://www.stackoverflow.com redirects to insecure http://stackoverflow.com [duplicate]
Not sure if this is the right place to report this, but here are a couple of minor points:
If I navigate to https://www.stackoverflow.com it redirects me to http://stackoverflow.com.
I would have ...
59
votes
1
answer
385
views
Talent - Company page shows "Connection is Not Secure" error due to the http:// image
In the Stack Overflow Talent - Company page, if you didn't set any Cover Photo, by default it has this image as a cover photo. Due to the http:// image, the Company page shows aConnection is Not ...
52
votes
2
answers
865
views
Mixed content ad
I'm seeing mixed content due to an ad.
The offending host is idsync.rlcdn.com while delivering a 1x1 pixel.
I believe this is the offending ad. Tracking down these tracking pixels is a little tricky ...
49
votes
3
answers
2k
views
Is Stack Overflow secure even when not using HTTPS?
I noticed stackoverflow.com doesn't force the use of an HTTPS connection even when the user is logged in.
I've found this question on security.stackexchange.com on "Why is Stack Overflow not using ...
46
votes
0
answers
388
views
Hot Network Questions are HTTP links when the site itself is served via HTTPS
Links to Hot Network Questions are always HTTP links, even when the site is accessed over HTTPS.
This is inconsistent with question links in Linked and Related sections (when Stack Overflow is ...
44
votes
1
answer
845
views
Ad causing mixed content in HTTPS
Since Stack Overflow is officially HTTPS, I was sad to see a mixed content warning from an ad.
Can we fix the ad to use HTTPS too?
The offending URL is a tracking pixel in a frame from this ad.
44
votes
1
answer
1k
views
Why are some pages randomly less secure than others?
I was just browsing Meta when I noticed the following (I was on this post in a different tab when I took the right screenshot),
Now this is where the "randomness" comes in. I only get the left ...
43
votes
0
answers
675
views
Use HTTPS for snippets because some features are HTTPS only
Many features of the browsers are starting to require HTTPS which means they don't work on Stack Overflow snippets. Please consider using HTTPS for Stack Overflow snippets.
I recently tried to answer ...
38
votes
2
answers
1k
views
Is there a way to force enable HTTPS for my account?
I noticed recently (middle of 2015) that Stack Overflow is available over HTTP and HTTPS, and HTTPS works perfectly (no mixed content warnings, etc).
Is there a flag I can set for my account to ...
38
votes
1
answer
10k
views
A required TLS feature is missing. Error code: MOZILLA_PKIX_ERROR_REQUIRED_TLS_FEATURE_MISSING
Suddenly, today I am having issues connecting to https://stackoverflow.com/ from Firefox:
An error occurred during a connection to stackoverflow.com. A required TLS feature is missing. Error code: ...
36
votes
0
answers
357
views
Top bar Home icon redirects me to http site
The main site link to home in the top bar is still set to http://stackoverflow.com, even though I manually load the https version.
Are also affected all links to SO posts in Inbox, Achievements, and ...
32
votes
2
answers
836
views
Why does Stack Overflow's help page say the SSL certificate is issued for footballsupport.geniussports.com?
On the Stack Overflow help page you can see the certificate is issued to a different site.
Both Stack Overflow and that site use freshdesk. Does the certificate from freshdesk need to be ...
32
votes
0
answers
497
views
Certificate error for stackoverflow.help [closed]
When visiting the help center, a banner is displayed:
The "Click here »" link points to https://stackoverflow.help/, which when visited redirects to https://www.stackoverflow.help/ and presents a ...
31
votes
1
answer
611
views
Should flair provide HTTPS links by default?
I have seen default to HTTPS links when using Imgur links, https://www.stackoverflow.com redirects to insecure http://stackoverflow.com and HTTPS to Imgur?, but none of them really capture my question,...
27
votes
1
answer
250
views
The certificate for itr-links.stackoverflow.email has expired
I wanted to change my email address and clicked the link in a newsletter I received, but the server had an expired certificate (roughly 20 hours ago). Shouldn't be a big issue to renew :)
27
votes
0
answers
146
views
Some "http://" links in the election page
In the election page, a few of the links for the badges and MSE sites are still http://, these links can be updated to https://
Screenshot for reference:
25
votes
1
answer
499
views
Why are child meta links flipped after transition to HTTPS?
As seen from this post, Stack Exchange network is transiting to the HTTPS protocol.
In the list of things to be done, one item caught my attention:
(Child metas) Move from meta.*.stackexchange....
23
votes
2
answers
404
views
SE Network Login Test Page: "Messaging failed; stackauth.com skipped" - Am I missing something?
While looking for a generic inbox link, I stumbled onto the hidden links page, where a post by @ShadowWizard links to the Network Login Test Page.
Here's my test result:
SO & SE seem to be ...
22
votes
1
answer
378
views
adzerk.net causes mixed content error on main site
It looks like there is an asset loaded from stackoverflow.com that is breaking the HTTPS configuration, causing the site to be flagged with the mixed content warning (hence downgraded to insecure).
...
21
votes
2
answers
2k
views
Certificate error when using stackoverflow.com from certain IP addresses
My company has several wireless networks with different public IP addresses. If I'm connected to one of them, I occasionally get a certificate error when connecting to stackoverflow.com.
The ...
21
votes
0
answers
392
views
Are notifications of Stack Overflow HTTP-only? [closed]
The hyperlinks of comment and achievement notifications in the navigation bar are using HTTP even if I'm visiting Stack Overflow by HTTPS.
Is this something that ought to be fixed or did I miss a ...
18
votes
1
answer
533
views
How to make a working snippet with a library not available in HTTPS?
Since Stack Overflow is in HTTPS, I suppose a lot of snippets are not working anymore and returning a "Mixed Content" error.
I have this issue with one of my answers: Skipping null values with Morris....
18
votes
1
answer
261
views
Link to chat from Site Switcher is not HTTPS
On the Site Switcher drop down
The link to chat is not https. Inspecting the element gives me
<div class="related-links">
<a href="https://stackoverflow.com/help" class="js-gps-track" ...
18
votes
0
answers
526
views
Is Stack Overflow updating times on questions, comments, answers more slowly (and not spotting new comments, answers as quickly)?
Are you seeing Stack Overflow show updates to the times on questions, answers and comments — and collecting/displaying new answers and comments and other updates to questions — much more slowly than ...
17
votes
0
answers
383
views
Why doesn't Stack Overflow default to SSL? [duplicate]
Why doesn't http://www.stackoverflow.com redirect to https://www.stackoverflow.com?
Is there a reason SSL is not enforced?
16
votes
1
answer
203
views
Tag images are hard-coded to use http
Steps to reproduce
Go to https://stackoverflow.com/questions/tagged/firefox (note the s in https)
View source (view-source:https://stackoverflow.com/questions/tagged/firefox, doesn't get converted to ...
15
votes
1
answer
234
views
Bad SSL link on Stack Overflow blog pointing to Stack Overflow Enterprise site
Looks like someone needs a new SSL Cert! Repro is:
Go to Stack Overflow Blog.
Click on this link in the page footer: Get Stack Overflow Enterprise
Expected: fascinating marketing content about ...
15
votes
0
answers
662
views
Default to HTTPS links when using imgur links
I use the HTTPS Everywhere extension, and Chrome shows the security warning below:
If you open the browser console you'll see that the culprit are imgur links.
What is the state of HTTPS support? A ...
11
votes
0
answers
282
views
Should protocol-relative URLs be disallowed in profile "About me"?
Unexpected error message when opening “About me” for editing:
All image URLs must start with https://
This is triggered by the existing protocol-relative URLs in the “About me” text for my user ...
10
votes
2
answers
677
views
Wikipedia links not https, is there a special reason they shouldn't?
While editing this answer to a generic question, I was adding Wikipedia links, I noticed that the other existing (also Wikipedia) links where all HTTP, though mine were HTTPS.
Shouldn't they have ...
9
votes
0
answers
76
views
Not Secure error in Stack Overflow for Teams Help Center page [closed]
In the Stack Overflow Teams -> Following and watching tags page, due to few http:// images the page received the Connection is Not Secure error.
The http:// images are:
https://i.stack.imgur.com/...
9
votes
0
answers
324
views
Periodic SSL cert errors
Once or twice a day I get this error, it persists for 5 minutes or so and eventually resolves itself:
The owner of stackoverflow.com has configured their website improperly. To protect your ...
9
votes
0
answers
346
views
Support https searches in opensearch.xml
I was trying to add search providers to Microsoft Edge. I know StackOverflow supports OpenSearch so I tried to add it. However, I get an error message saying the search template is not using a secure ...
9
votes
0
answers
94
views
Make share URLs of questions and answers use HTTPS by default or based on loading protocol
I like to visit sites via HTTPS if possible and use HTTPS Everywhere to enforce. I was pretty surprised to see that links that I copied from the "share" box didn't use HTTPS but only HTTP.
This could ...
8
votes
2
answers
318
views
Improper HTTPS - Connection only partially encrypted [closed]
When I access Stack Overflow via HTTPS, my browser (Firefox) complains that not all elements (images) of the web page portal are loaded via HTTPS, leading to some insecurity. Can this be fixed please?
8
votes
1
answer
198
views
rads.stackoverflow.com links are not HTTPS
I find two HTTPS-related issues. I hope these can be improved:
Links to Amazon are automatically converted to a rewritten URL: http://rads.stackoverflow.com/amzn/click/<id>, like this. This ...
7
votes
0
answers
168
views
HTTPS Pages Not Loading [closed]
Pages requested over HTTPS (https://stackoverflow.com/, https://stackoverflow.com/a/23964427/1084749, etc) are not loading for me. In both Safari (logged in to SO) and Firefox (not), the browser just ...
6
votes
1
answer
97
views
Developer story company logo is not served over HTTPS
My developer story is insecure!
The cause is the HP logo, which is linked using HTTP: http://public.crunchbase.com/….jpg
The logo is coming from the built-in company picker, and the UI does not ...
6
votes
1
answer
52
views
User profile link on help center page uses http instead of https
I suppose all links to the Stack Exchange Network should be in HTTPS. Obviously this one in the MCVE help page was forgotten.
Click to see full image
Looks like this user specifically likes HTTP :)
6
votes
0
answers
52
views
Link to meta is http in the main site's ask questions page
In the main site Ask Question, in the How to Ask side bar, the link to meta site is http:// only.
The tip in the side bar is:
If your question is about this website, ask it on meta instead.
This ...
6
votes
0
answers
92
views
Why am I getting: "stackoverflow.com connection is untrusted "alerts?
When trying to reach www.stackoverflow.com domain I'm getting warnings both
in Chrome:
and Firefox:
Why am I getting these alerts?
How do you know if the issue, whatever it may be, is on their end ...
5
votes
1
answer
409
views
Why do I get untrusted certificate error for Stack Overflow? [duplicate]
I face this error only in Google Chrome (version 33.0.1750.146 m), not in Firefox on the same system.
Because of the problem I couldn't sign in to my account and I don't face this error with other ...
5
votes
0
answers
130
views
Mixed content due to ads
There is mixed (https and http) content appearing occasionally to me.
It seems to appear at the same time, but maybe not always as it couldn't catch it again a couple of days ago when I first noticed ...
5
votes
0
answers
292
views
HTTPs by default [duplicate]
I am not sure how I missed this before, but when navigating to SO or other SE sites, it does not use HTTPs by default. Has this always been the case?
Why does the site not redirect to HTTPs ...
4
votes
1
answer
59
views
Links in job matches email are not https yet
Three links in the email sent with new jobs matches are still not https:
Stack Overflow logo, links to http://stackoverflow.com/
"See more jobs", links to http://stackoverflow.com/jobs?sort=p&...
4
votes
1
answer
381
views
CDN js+css sometimes fails to load over https
Lately I've been continuously experiencing malfunctions of the site when browsing with HTTPS. The urls
https://cdn.sstatic.net/Js/stub.en.js?v=178f8ec7cc80 and
https://cdn.sstatic.net/stackoverflow/...
4
votes
0
answers
496
views
stackoverflow.com is not working [closed]
Any idea why is stackoverflow not working?
Normal mode:
Incognito mode + certificate: