Security certificate expired?
-
- Posts: 1735
- Joined: Mon Aug 13, 2007 2:04 am
- Please enter the next number in sequence: 1
- Location: Mercia
Re: Security certificate expired?
Seems fairly common for browsers not to show details of the URL. I think they often show a little lock if it's HTTPS and something else (iPad says 'Not Secure') for HTTP.
I don't get the banner ads in Safari with HTTPS but do with HTTP. I have an ad blocker on the PC so Dale isn't getting any crumbs from me now. I see that quite a few ad-funded sites are now showing a donate button if they detect an ad blocker
I don't get the banner ads in Safari with HTTPS but do with HTTP. I have an ad blocker on the PC so Dale isn't getting any crumbs from me now. I see that quite a few ad-funded sites are now showing a donate button if they detect an ad blocker
- Nanohedron
- Moderatorer
- Posts: 38212
- Joined: Wed Dec 18, 2002 6:00 pm
- antispam: No
- Please enter the next number in sequence: 8
- Tell us something.: Been a fluter, citternist, and uilleann piper; committed now to the way of the harp.
Oh, yeah: also a mod here, not a spammer. A matter of opinion, perhaps. - Location: Lefse country
Re: Security certificate expired?
Right, that's what I've got now. So that clears that up.david_h wrote:I think they often show a little lock if it's HTTPS ...
That must be the difference, then. I used to run an ad blocker, but when I got my new laptop I didn't bother, so I must assume that seeing the C&F banner ads has had everything to do with the site not being secure.david_h wrote:I don't get the banner ads in Safari with HTTPS but do with HTTP.
I'm still not too happy about the avatars being blocked.
"If you take music out of this world, you will have nothing but a ball of fire." - Tribal musician
-
- Posts: 1419
- Joined: Sun Dec 05, 2010 2:59 pm
- antispam: No
- Please enter the next number in sequence: 10
- Location: Southwestern Ontario
Re: Security certificate expired?
Very curious. Open this link in another browser tab, https://forums.chiffandfipple.com/downl ... r=1806.gif, then try to display this thread again. Your avatar should show up.
My current best guess is this ... The HTTPS web server is slow about delivering the avatars, slower than the HTTP web server, and so slow that the browser gives up and just displays the text associated with the image, "user avatar". Once your browser has a particular avatar in the cache, it doesn't have to wait, and can display the image with the web page.
My current best guess is this ... The HTTPS web server is slow about delivering the avatars, slower than the HTTP web server, and so slow that the browser gives up and just displays the text associated with the image, "user avatar". Once your browser has a particular avatar in the cache, it doesn't have to wait, and can display the image with the web page.
- Nanohedron
- Moderatorer
- Posts: 38212
- Joined: Wed Dec 18, 2002 6:00 pm
- antispam: No
- Please enter the next number in sequence: 8
- Tell us something.: Been a fluter, citternist, and uilleann piper; committed now to the way of the harp.
Oh, yeah: also a mod here, not a spammer. A matter of opinion, perhaps. - Location: Lefse country
Re: Security certificate expired?
On clicking the link, for me the tab reads "403 Forbidden". The page reads:Tunborough wrote:Very curious. Open this link in another browser tab, https://forums.chiffandfipple.com/downl ... r=1806.gif, then try to display this thread again. Your avatar should show up.
Forbidden
You don't have permission to access /images/avatars/upload/50491f7ac84643578ea52bbca5389ffb_1806.gif on this server.
Additionally, a 403 Forbidden error was encountered while trying to use an ErrorDocument to handle the request.
"If you take music out of this world, you will have nothing but a ball of fire." - Tribal musician
-
- Posts: 1419
- Joined: Sun Dec 05, 2010 2:59 pm
- antispam: No
- Please enter the next number in sequence: 10
- Location: Southwestern Ontario
Re: Security certificate expired?
There seems to be some sort of redirection happening that works fine with the HTTP server, but not the HTTPS server. If I paste https://forums.chiffandfipple.com/downl ... r=1806.gif into the address bar (Firefox, Internet Explorer, or Microsoft Edge), the picture shows up just fine ... and then your avatar displays fine when I look at a thread. But if I just click on the link, I get the same error you got.
Ben's avatar is at https://forums.chiffandfipple.com/downl ... 201495.jpg.
Ben's avatar is at https://forums.chiffandfipple.com/downl ... 201495.jpg.
- kkrell
- Posts: 4831
- Joined: Mon Jul 29, 2002 6:00 pm
- antispam: No
- Please enter the next number in sequence: 8
- Tell us something.: Mostly producer of the Wooden Flute Obsession 3-volume 6-CD 7-hour set of mostly player's choice of Irish tunes, played mostly solo, on mostly wooden flutes by approximately 120 different mostly highly-rated traditional flute players & are mostly...
- Location: Los Angeles
- Contact:
Re: Security certificate expired?
I see the avatar all the time, with all of the links posted. My connection to C&F is definitely HTTP://, not HTTPS:
Using Firefox on Windows 7 & Ublock Origin.
Using Firefox on Windows 7 & Ublock Origin.
- Nanohedron
- Moderatorer
- Posts: 38212
- Joined: Wed Dec 18, 2002 6:00 pm
- antispam: No
- Please enter the next number in sequence: 8
- Tell us something.: Been a fluter, citternist, and uilleann piper; committed now to the way of the harp.
Oh, yeah: also a mod here, not a spammer. A matter of opinion, perhaps. - Location: Lefse country
Re: Security certificate expired?
The first link doesn't work for me no matter how I do it; with a direct click it's the same "403 Forbidden", and if I paste it into the address bar, the tab reads "download", and the page reads:Tunborough wrote:There seems to be some sort of redirection happening that works fine with the HTTP server, but not the HTTPS server. If I paste https://forums.chiffandfipple.com/downl ... r=1806.gif into the address bar (Firefox, Internet Explorer, or Microsoft Edge), the picture shows up just fine ... and then your avatar displays fine when I look at a thread. But if I just click on the link, I get the same error you got.
Ben's avatar is at https://forums.chiffandfipple.com/downl ... 201495.jpg.
Here the blue text is simply to indicate that a link was provided. The actual link didn't do anything for me either, apart from giving me a Google page with lists of info on how to download stuff.This site can’t be reached
download’s server IP address could not be found.
Search Google for download file
ERR_NAME_NOT_RESOLVED
Your second link works, though all I get is Ben's avatar on a black page.
"If you take music out of this world, you will have nothing but a ball of fire." - Tribal musician
- Nanohedron
- Moderatorer
- Posts: 38212
- Joined: Wed Dec 18, 2002 6:00 pm
- antispam: No
- Please enter the next number in sequence: 8
- Tell us something.: Been a fluter, citternist, and uilleann piper; committed now to the way of the harp.
Oh, yeah: also a mod here, not a spammer. A matter of opinion, perhaps. - Location: Lefse country
Re: Security certificate expired?
What the ...?
Just completed an update after closing all web pages and doing a restart, and now C&F's URL reads "Not secure", I'm getting the banner ads again, and I can see the avatars.
If I access C&F by a Google search, I get the secure version. What gives?
Just completed an update after closing all web pages and doing a restart, and now C&F's URL reads "Not secure", I'm getting the banner ads again, and I can see the avatars.
If I access C&F by a Google search, I get the secure version. What gives?
"If you take music out of this world, you will have nothing but a ball of fire." - Tribal musician
-
- Posts: 1735
- Joined: Mon Aug 13, 2007 2:04 am
- Please enter the next number in sequence: 1
- Location: Mercia
Re: Security certificate expired?
I think it may depend on which link has got stored by the various autocomplete, recent searches, recently visited features of the browser and search engine.Nanohedron wrote: What gives?
i get Forbidden for all Tunborough's links from the HTTPS. I wonder if it's quirk of the board software which makes the pages up on the fly. From a quick look links off site have https inserted but relative links don't so must be relying on some default action of the server.
-
- Posts: 1419
- Joined: Sun Dec 05, 2010 2:59 pm
- antispam: No
- Please enter the next number in sequence: 10
- Location: Southwestern Ontario
Re: Security certificate expired?
The forum software was being clever, but not quite clever enough, with a URL that I entered as plain text. The links to the avatars are https://forums.chiffandfipple.com/downl ... r=1806.gif and https://forums.chiffandfipple.com/downl ... 201495.jpg. If I click on them, I get "Forbidden", like you do. If I cut and paste the URLs into the address bar:Nanohedron wrote:The first link doesn't work for me no matter how I do it; with a direct click it's the same "403 Forbidden", and if I paste it into the address bar, the tab reads "download", and the page reads:
Your second link works, though all I get is Ben's avatar on a black page.This site can’t be reached
...
Code: Select all
https://forums.chiffandfipple.com/download/file.php?avatar=1806.gif
and
https://forums.chiffandfipple.com/download/file.php?avatar=10298_1232201495.jpg
-
- Posts: 1419
- Joined: Sun Dec 05, 2010 2:59 pm
- antispam: No
- Please enter the next number in sequence: 10
- Location: Southwestern Ontario
Re: Security certificate expired?
The main motivation for using HTTPS rather than HTTP is so that other people on the coffee shop WiFi can't eavesdrop on your browsing. Since C&F is a public forum, most of what you're doing here isn't a big secret. The main thing you want to protect is your password when you log in. Turns out, you can login via HTTPS, at https://forums.chiffandfipple.com/ucp.php?mode=login, then continue your browsing via HTTP, at search.php?search_id=active_topics, and still be logged in. This keeps your password secret, but avoids the problem with the missing avatars, for what it's worth.
-
- Posts: 1735
- Joined: Mon Aug 13, 2007 2:04 am
- Please enter the next number in sequence: 1
- Location: Mercia
Re: Security certificate expired?
That works. And the banner adds from dating sites come back*Tunborough wrote:...and still be logged in. This keeps your password secret, but avoids the problem with the missing avatars, for what it's worth.
* I only get them here. I suspect that it's to do with the frequent links to photo sharing sites used for hosting the images people share here.
- Nanohedron
- Moderatorer
- Posts: 38212
- Joined: Wed Dec 18, 2002 6:00 pm
- antispam: No
- Please enter the next number in sequence: 8
- Tell us something.: Been a fluter, citternist, and uilleann piper; committed now to the way of the harp.
Oh, yeah: also a mod here, not a spammer. A matter of opinion, perhaps. - Location: Lefse country
Re: Security certificate expired?
So am I to understand that even though Active Topics is HTTP, in this case it doesn't matter, because the login was via HTTPS and that covers everything?Tunborough wrote:The main thing you want to protect is your password when you log in. Turns out, you can login via HTTPS, at https://forums.chiffandfipple.com/ucp.php?mode=login, then continue your browsing via HTTP, at search.php?search_id=active_topics, and still be logged in. This keeps your password secret, but avoids the problem with the missing avatars, for what it's worth.
TBH, since I'm normally not in any particular hurry, I've never seen much reason to use Active Topics, and I usually leave it alone. Using it just to get banner ads and avatars is hardly the enticement I would need.
"If you take music out of this world, you will have nothing but a ball of fire." - Tribal musician
- Mr.Gumby
- Posts: 6606
- Joined: Mon Jun 07, 2010 11:31 am
- antispam: No
- Please enter the next number in sequence: 8
- Location: the Back of Beyond
Re: Security certificate expired?
If you use Firefox, the add on https everywhere may help :So am I to understand that even though Active Topics is HTTP, in this case it doesn't matter, because the login was via HTTPS and that covers everything?
Encrypt the web! HTTPS Everywhere is a Firefox extension to protect your communications by enabling HTTPS encryption automatically on sites that are known to support it, even when you type URLs or follow links that omit the https: prefix.
My brain hurts
- Nanohedron
- Moderatorer
- Posts: 38212
- Joined: Wed Dec 18, 2002 6:00 pm
- antispam: No
- Please enter the next number in sequence: 8
- Tell us something.: Been a fluter, citternist, and uilleann piper; committed now to the way of the harp.
Oh, yeah: also a mod here, not a spammer. A matter of opinion, perhaps. - Location: Lefse country
Re: Security certificate expired?
Apparently I've got Mozilla (among other things), but Firefox per se isn't listed.Mr.Gumby wrote:If you use Firefox, the add on https everywhere may help ...
I'm afraid this is where my ignorance shines.
"If you take music out of this world, you will have nothing but a ball of fire." - Tribal musician