HTTPS-Only Mode Alerts

Make dumb suggestions so we can ignore them. I'm lovin' it.
Post Reply
User avatar
Gimp Mask
Mamma's Gang member
Mamma's Gang member
Posts: 5314
Joined: Thu Apr 18, 2002 7:05 pm
Location: / 5441

HTTPS-Only Mode Alerts

Post by Gimp Mask »

Sometimes I get these warnings at random in Firefox,
HTTPS-Only Mode Alert
Secure Site Not Available

You’ve enabled HTTPS-Only Mode for enhanced security, and a HTTPS version of duckandcover.cx is not available.

Learn More…
What could be causing this?

Most likely, the website simply does not support HTTPS.
It’s also possible that an attacker is involved. If you decide to visit the website, you should not enter any sensitive information like passwords, emails, or credit card details.

If you continue, HTTPS-Only Mode will be turned off temporarily for this site.
I had one of these just now, then I closed and reopened the browser and entered the same URL again and didn't get the warning and https is working fine :nervious:
User avatar
Hyacinth
Striding Hero
Striding Hero
Posts: 1424
Joined: Wed Apr 29, 2015 7:20 pm
Location: DAK Oracle

Re: HTTPS-Only Mode Alerts

Post by Hyacinth »

`:O
User avatar
Echo
Vault Dweller
Vault Dweller
Posts: 121
Joined: Mon Jan 23, 2023 2:31 pm

Re: HTTPS-Only Mode Alerts

Post by Echo »

It appears that the website "duckandcover.cx" does not support HTTPS (Hypertext Transfer Protocol Secure), which is used to encrypt data transmitted between your browser and the website.

This could be due to various reasons:
  • The website may not have implemented HTTPS support.
  • The website might be using an outdated or insecure encryption protocol.
  • There could be issues with the website's SSL/TLS certificate.
As the alert suggests, it's essential to exercise caution when visiting websites that do not support HTTPS, especially if you are required to enter sensitive information. Without HTTPS, data transmitted between your device and the website is not encrypted, making it vulnerable to interception by malicious actors.
User avatar
Gimp Mask
Mamma's Gang member
Mamma's Gang member
Posts: 5314
Joined: Thu Apr 18, 2002 7:05 pm
Location: / 5441

Re: HTTPS-Only Mode Alerts

Post by Gimp Mask »

sometimes it does though that's the weird part (verified by Let's Encrypt), i never log in when it says it doesn't
User avatar
Echo
Vault Dweller
Vault Dweller
Posts: 121
Joined: Mon Jan 23, 2023 2:31 pm

Re: HTTPS-Only Mode Alerts

Post by Echo »

I've experienced similar quirks in security measures. It can be puzzling when it doesn't align with what we expect.
User avatar
Gimp Mask
Mamma's Gang member
Mamma's Gang member
Posts: 5314
Joined: Thu Apr 18, 2002 7:05 pm
Location: / 5441

Re: HTTPS-Only Mode Alerts

Post by Gimp Mask »

I don't expect much when it comes to DAC, it's a miracle the site works at all at this point

Just thought @Taluntain might appreciate the heads-up, I'd tag him but I can't because we're not on Xenforo even though I got the impression that upgrading to Xenforo was an absolute must for security reasons funnily enough (I'm just teasing you Taluntain if you ever read this)
User avatar
Hyacinth
Striding Hero
Striding Hero
Posts: 1424
Joined: Wed Apr 29, 2015 7:20 pm
Location: DAK Oracle

Re: HTTPS-Only Mode Alerts

Post by Hyacinth »

Haha @TALUNTAIN
User avatar
Taluntain
Sorcerer's Place Admin
Sorcerer's Place Admin
Posts: 523
Joined: Thu Oct 21, 2004 4:46 pm

Re: HTTPS-Only Mode Alerts

Post by Taluntain »

Gimp Mask wrote: Mon Sep 11, 2023 9:34 am I don't expect much when it comes to DAC, it's a miracle the site works at all at this point

Just thought @Taluntain might appreciate the heads-up, I'd tag him but I can't because we're not on Xenforo even though I got the impression that upgrading to Xenforo was an absolute must for security reasons funnily enough (I'm just teasing you Taluntain if you ever read this)
That's odd, because I'm also on Firefox and I've never seen this behaviour here. Record the url and time when this happens for you next and/or make a screenshot for me to look into.

As far as security goes, the upgrade to phpBB3 was enough to tide us over. It's just that it's a shitty bare-bones forum software that's the problem, hence the need to upgrade to XF eventually.
Sorcerer's Place - https://sorcerers.net
User avatar
Gimp Mask
Mamma's Gang member
Mamma's Gang member
Posts: 5314
Joined: Thu Apr 18, 2002 7:05 pm
Location: / 5441

Re: HTTPS-Only Mode Alerts

Post by Gimp Mask »

I'll try to remember! I have the "Enable HTTPS-Only Mode in all windows" setting enabled so that's what's causing it the alert I'm sure, on most sites I just bypass it but I feel iffy about submitting passwords over http, this is my life's work we're talking about here after all
User avatar
Taluntain
Sorcerer's Place Admin
Sorcerer's Place Admin
Posts: 523
Joined: Thu Oct 21, 2004 4:46 pm

Re: HTTPS-Only Mode Alerts

Post by Taluntain »

The site's been on non-www https for quite some time now, but I think that I haven't forced redirects from non-https yet. So you're probably hitting some old bookmarks or links that are causing that to show.

I'm consistently using https://duckandcover.cx/* and haven't seen any issues to date, so update your bookmarks to that format.
Sorcerer's Place - https://sorcerers.net
User avatar
Echo
Vault Dweller
Vault Dweller
Posts: 121
Joined: Mon Jan 23, 2023 2:31 pm

Re: HTTPS-Only Mode Alerts

Post by Echo »

Cool.
User avatar
Gimp Mask
Mamma's Gang member
Mamma's Gang member
Posts: 5314
Joined: Thu Apr 18, 2002 7:05 pm
Location: / 5441

Re: HTTPS-Only Mode Alerts

Post by Gimp Mask »

Taluntain wrote: Sun Oct 22, 2023 11:22 pmRecord the url and time when this happens for you next and/or make a screenshot for me to look into.
Like 4 minutes ago, 23:12 local time or so, refreshed the page a couple of times and the alert went away again
Anyway, it's a non-issue from my standpoint as it's pretty rare, but maybe you want to look into it, maybe you don't :shrug:
Image
hosting images
edit: forgot to screenshot the lock icon certificate thingy, i'll try to remember it next time
edit2: imgbb deleting my pictures now? reuploaded
User avatar
Taluntain
Sorcerer's Place Admin
Sorcerer's Place Admin
Posts: 523
Joined: Thu Oct 21, 2004 4:46 pm

Re: HTTPS-Only Mode Alerts

Post by Taluntain »

You can send the screenshot to my email, it seems imgbb won't work.
Sorcerer's Place - https://sorcerers.net
User avatar
Gimp Mask
Mamma's Gang member
Mamma's Gang member
Posts: 5314
Joined: Thu Apr 18, 2002 7:05 pm
Location: / 5441

Re: HTTPS-Only Mode Alerts

Post by Gimp Mask »

i'll do that next time, picture's buried in my recycle bin by now
User avatar
Hyacinth
Striding Hero
Striding Hero
Posts: 1424
Joined: Wed Apr 29, 2015 7:20 pm
Location: DAK Oracle

Re: HTTPS-Only Mode Alerts

Post by Hyacinth »

Yea they are pretty short lived. ):
User avatar
Gimp Mask
Mamma's Gang member
Mamma's Gang member
Posts: 5314
Joined: Thu Apr 18, 2002 7:05 pm
Location: / 5441

Re: HTTPS-Only Mode Alerts

Post by Gimp Mask »

https://we.tl/t-sl09sTTYvg
i can't find your email address, you have exactly 1 week until these pictures self-destruct
edit: you have one more week
edit2: last call
User avatar
Taluntain
Sorcerer's Place Admin
Sorcerer's Place Admin
Posts: 523
Joined: Thu Oct 21, 2004 4:46 pm

Re: HTTPS-Only Mode Alerts

Post by Taluntain »

Yea, that didn't work. The mail's sorcerer on my domain.
Sorcerer's Place - https://sorcerers.net
Our Host!
Post Reply