Bitcoin Forum

https://?

Works for me ?

someone hijackin yo certs

Working for me as well.

Do you have any more details as to exactly what's wrong?

this is what i'm seeing:  https://bitcointalk.org/index.php?topic=76041.msg843084#msg843084

You'll see that on pages that contain embedded images gotten from non-HTTPS sites. It's fine.

So it seems you are using Chrome? Yes? What OS are you on?

Click the little lock icon to see what is wrong with the certificate.

why is this happening now?

yes, i'm in Chrome in Mac Lion osx.

lock says page "includes resources which are not secure".

how should i remedy this?

edit:  the certificate is verified by Smartcom.

I'm using Chrome on OS X 10.7 as well.  This is normal behavior for it to warn of unencrypted resources, but Mine doesn't have the red line through the https in the URL.

The BTCTalk server does not host avatars when they're pulled from a URL. They are hosted by the original image-hoster, which may or may not use HTTPS. This is not really relevant to your communications with the forum being encrypted or not.

It should show a yellow triangular safety sign over the "lock" icon, not a strike through "https." Since none of us are having problems.... Are you sure your system clock is sync'd correctly?

I also have the red line. Windows 7. Chrome (18.0.1025.151 beta-m).

my just got fixed with green https://

i didn't do a thing....

You went to a different page....

Perhaps some ad servers are supplying unencrypted content.
Using adblock might help.

Also check out the fingerprint. Correct is 7D.3D.6A9495E4EE23C7A7C590BE1B3750BA84.D3.34 - SHA1 (i added the dots)

You aren't reading.

If there is an image on the page NOT hosted by bitcointalk.org chrome will warn you by showing slash through the  https.

Nothing was fixed and nothing is broken.  Chrome is correctly indicating a page is not completely secure as some of the content comes form an insecure 3rd party.

so how does an image like that find its way onto the page?  i've never seen this before and didn't do anything different.

Any user linking to an image on another site.


http://fc07.deviantart.net/fs20/f/2007/271/3/2/OH_NOES_ITS_A_SHARK_by_CryingWingedWolf.jpg

...unless said image is also being delivered over SSL.

The ads here don't use any external JavaScript or images. (And Adblock won't block them by default.)

wow really? https://bitcointalk.org/index.php?topic=69891.0

If the https:// is crossed out and in red, there is a SERIOUS problem. Click the lock icon and tell us more. However, if it's grey, it's okay.

+1, not sure what OP was seeing. Here are some screenshots to make the "external images" thing clear:

https://i.imgur.com/FmUOO.png https://i.imgur.com/13I0R.png

When I connect to my router, for example, it shows the red crossed out HTTPS because the router has an invalid self generated certificate.

One other reason I think it could show up potentially in your case is if you use OpenDNS or similar - when OpenDNS blocks some HTTPS content, the certificate is invalid because it is for the OpenDNS domain, and not the domain that was expected by the browser when fetching the resource. That could be what is happening to you.

Yesterday, on the front page, https was red and crossed out for me, but the only problem reported when clicking the lock was that the page includes resources that are not secure. Today, all is back to normal. I have no idea what that was about but it seems like the same problem that OP had. Windows 7. Chrome.

Chrome security indicators:

https://support.google.com/chrome/bin/answer.py?hl=en&answer=95617

Red x with slash through https:

The site uses SSL, but Google Chrome has detected either high-risk insecure content on the page or problems with the site’s certificate. Don’t enter sensitive information on this page. Invalid certificate or other serious https issues could indicate that someone is attempting to tamper with your connection to the site


So perhaps one of the non https links on the page is on google's watch list for "high risk" sites...

Interesting, wonder what their secret formula for "high risk" sites is.

There shouldn't be an external resources loaded from the front page. Next time that happens, please send me the page's source.