Thank you Otanx

Started by deanwebb, August 01, 2016, 11:06:32 AM

Previous topic - Next topic
Print
Go Down Pages1
User actions

deanwebb

August 01, 2016, 11:06:32 AM
 :awesome:

Even though I also figured out the issue, you sent me a PM about how my old avatar was breaking HTTPS. Thank you, Otanx!

Also, I forgot that non admins can't post in the announcements area... which is why you couldn't post there.

If we see a non-green lock on a page in the forum, chances are it's a linked image breaking things... I'll be more cautious about that.
Take a baseball bat and trash all the routers, shout out "IT'S A NETWORK PROBLEM NOW, SUCKERS!" and then peel out of the parking lot in your Ferrari.
"The world could perish if people only worked on things that were easy to handle." -- Vladimir Savchenko
Вопросы есть? Вопросов нет! | BCEB: Belkin Certified Expert Baffler | "Plan B is Plan A with an element of panic." -- John Clarke
Accounting is architecture, remember that!
Air gaps are high-latency Internet connections.

Otanx

#1
August 01, 2016, 04:07:17 PM
/Brushes imaginary dust off shoulder

No problem.

-Otanx

wintermute000

#2
August 01, 2016, 09:14:19 PM
Can I ask, how did a single image break https?

deanwebb

#3
August 01, 2016, 09:37:56 PM
My avatar was http://aohell.com/100/heinz1.jpg, and that meant each page with my avatar was loading an unsecure element.
Take a baseball bat and trash all the routers, shout out "IT'S A NETWORK PROBLEM NOW, SUCKERS!" and then peel out of the parking lot in your Ferrari.
"The world could perish if people only worked on things that were easy to handle." -- Vladimir Savchenko
Вопросы есть? Вопросов нет! | BCEB: Belkin Certified Expert Baffler | "Plan B is Plan A with an element of panic." -- John Clarke
Accounting is architecture, remember that!
Air gaps are high-latency Internet connections.

Dieselboy

#4
August 03, 2016, 12:57:12 AM
So if the content was HTTPS://External-URL instead of HTTP://External-URL then there would have been no issue?

Seems daft to me.

Otanx

#5
August 03, 2016, 12:15:18 PM
The idea is if I am going to a secure website then I expect the entire thing to be secured. If it isn't then someone can MITM the request to the unsecure portion (Mr. Webb's old avatar in this case), and inject something into my secure page. I am going to an unsecure site then I don't care if some of the stuff is secure.

-Otanx

deanwebb

#6
August 04, 2016, 10:12:32 AM
Exactly. And the https avatar didn't display, anyway, so I uploaded one.
Take a baseball bat and trash all the routers, shout out "IT'S A NETWORK PROBLEM NOW, SUCKERS!" and then peel out of the parking lot in your Ferrari.
"The world could perish if people only worked on things that were easy to handle." -- Vladimir Savchenko
Вопросы есть? Вопросов нет! | BCEB: Belkin Certified Expert Baffler | "Plan B is Plan A with an element of panic." -- John Clarke
Accounting is architecture, remember that!
Air gaps are high-latency Internet connections.
Print
Go Up Pages1
User actions