What happened to https://bitcointalk.org?

theymos

administrator

Activity: 5222

Merit: 13032

Quote from: D.H. on April 10, 2012, 04:30:14 AM

Yesterday, on the front page, https was red and crossed out for me, but the only problem reported when clicking the lock was that the page includes resources that are not secure. Today, all is back to normal. I have no idea what that was about but it seems like the same problem that OP had. Windows 7. Chrome.

There shouldn't be an external resources loaded from the front page. Next time that happens, please send me the page's source.

rjk

sr. member

Activity: 448

Merit: 250

1ngldh

Quote from: Exonumia on April 10, 2012, 07:06:47 AM

So perhaps one of the non https links on the page is on google's watch list for "high risk" sites...

Interesting, wonder what their secret formula for "high risk" sites is.

Exonumia

full member

Activity: 189

Merit: 101

Chrome security indicators:

https://support.google.com/chrome/bin/answer.py?hl=en&answer=95617

Red x with slash through https:

The site uses SSL, but Google Chrome has detected either high-risk insecure content on the page or problems with the site’s certificate. Don’t enter sensitive information on this page. Invalid certificate or other serious https issues could indicate that someone is attempting to tamper with your connection to the site

So perhaps one of the non https links on the page is on google's watch list for "high risk" sites...

D.H.

sr. member

Activity: 311

Merit: 251

Bitcoin.se site owner

Quote from: Maged on April 09, 2012, 09:44:33 PM

If the https:// is crossed out and in red, there is a SERIOUS problem. Click the lock icon and tell us more. However, if it's grey, it's okay.

Yesterday, on the front page, https was red and crossed out for me, but the only problem reported when clicking the lock was that the page includes resources that are not secure. Today, all is back to normal. I have no idea what that was about but it seems like the same problem that OP had. Windows 7. Chrome.

rjk

sr. member

Activity: 448

Merit: 250

1ngldh

Quote from: Maged on April 09, 2012, 09:44:33 PM

If the https:// is crossed out and in red, there is a SERIOUS problem. Click the lock icon and tell us more. However, if it's grey, it's okay.

+1, not sure what OP was seeing. Here are some screenshots to make the "external images" thing clear:

When I connect to my router, for example, it shows the red crossed out HTTPS because the router has an invalid self generated certificate.

One other reason I think it could show up potentially in your case is if you use OpenDNS or similar - when OpenDNS blocks some HTTPS content, the certificate is invalid because it is for the OpenDNS domain, and not the domain that was expected by the browser when fetching the resource. That could be what is happening to you.

Maged

legendary

Activity: 1204

Merit: 1015

If the https:// is crossed out and in red, there is a SERIOUS problem. Click the lock icon and tell us more. However, if it's grey, it's okay.

grue

legendary

Activity: 2058

Merit: 1452

wow really? https://bitcointalksearch.org/topic/bitcointalk-https-is-not-staying-secure-69891

theymos

administrator

Activity: 5222

Merit: 13032

Quote from: ShadowOfHarbringer on April 09, 2012, 02:22:37 PM

Perhaps some ad servers are supplying unencrypted content.
Using adblock might help.

The ads here don't use any external JavaScript or images. (And Adblock won't block them by default.)

terrytibbs

hero member

Activity: 560

Merit: 501

Quote from: DeathAndTaxes on April 09, 2012, 02:40:49 PM

Any user linking to an image on another site.

...unless said image is also being delivered over SSL.

DeathAndTaxes

donator

Activity: 1218

Merit: 1079

Gerald Davis

Any user linking to an image on another site.

cypherdoc

legendary

Activity: 1764

Merit: 1002

Quote from: DeathAndTaxes on April 09, 2012, 02:38:20 PM

Quote from: cypherdoc on April 09, 2012, 01:58:33 PM

my just got fixed with green https://

i didn't do a thing....

You aren't reading.

If there is an image on the page NOT hosted by bitcointalk.org chrome will warn you by showing slash through the https.

Nothing was fixed and nothing is broken. Chrome is correctly indicating a page is not completely secure as some of the content comes form an insecure 3rd party.

so how does an image like that find its way onto the page? i've never seen this before and didn't do anything different.

DeathAndTaxes

donator

Activity: 1218

Merit: 1079

Gerald Davis

Quote from: cypherdoc on April 09, 2012, 01:58:33 PM

my just got fixed with green https://

i didn't do a thing....

You aren't reading.

If there is an image on the page NOT hosted by bitcointalk.org chrome will warn you by showing slash through the https.

Nothing was fixed and nothing is broken. Chrome is correctly indicating a page is not completely secure as some of the content comes form an insecure 3rd party.

ShadowOfHarbringer

legendary

Activity: 1470

Merit: 1006

Bringing Legendary Har® to you since 1952

Perhaps some ad servers are supplying unencrypted content.
Using adblock might help.

Also check out the fingerprint. Correct is 7D.3D.6A9495E4EE23C7A7C590BE1B3750BA84.D3.34 - SHA1 (i added the dots)

rjk

sr. member

Activity: 448

Merit: 250

1ngldh

Quote from: cypherdoc on April 09, 2012, 01:58:33 PM

my just got fixed with green https://

i didn't do a thing....

You went to a different page....

cypherdoc

legendary

Activity: 1764

Merit: 1002

my just got fixed with green https://

i didn't do a thing....

D.H.

sr. member

Activity: 311

Merit: 251

Bitcoin.se site owner

I also have the red line. Windows 7. Chrome (18.0.1025.151 beta-m).

Kluge

donator

Activity: 1218

Merit: 1015

The BTCTalk server does not host avatars when they're pulled from a URL. They are hosted by the original image-hoster, which may or may not use HTTPS. This is not really relevant to your communications with the forum being encrypted or not.

It should show a yellow triangular safety sign over the "lock" icon, not a strike through "https." Since none of us are having problems.... Are you sure your system clock is sync'd correctly?

splatster

full member

Activity: 176

Merit: 100

Quote from: cypherdoc on April 09, 2012, 01:13:58 PM

why is this happening now?

yes, i'm in Chrome in Mac Lion osx.

lock says page "includes resources which are not secure".

how should i remedy this?

edit: the certificate is verified by Smartcom.

I'm using Chrome on OS X 10.7 as well. This is normal behavior for it to warn of unencrypted resources, but Mine doesn't have the red line through the https in the URL.

cypherdoc

legendary

Activity: 1764

Merit: 1002

why is this happening now?

yes, i'm in Chrome in Mac Lion osx.

lock says page "includes resources which are not secure".

how should i remedy this?

edit: the certificate is verified by Smartcom.

splatster

full member

Activity: 176

Merit: 100

Quote from: cypherdoc on April 09, 2012, 01:02:23 PM

this is what i'm seeing: ~~https~~://bitcointalk.org/index.php?topic=76041.msg843084#msg843084

So it seems you are using Chrome? Yes? What OS are you on?

Click the little lock icon to see what is wrong with the certificate.

Topic: What happened to https://bitcointalk.org? (Read 3513 times)