SSL certificate expired?

Degen · Aug 10, 2020

BlackHatWorld is not secure?

Google chrome :

Version 84.0.4147.105 (64-bits)

Links that are not secured:

https://www.blackhatworld.com/seo/w...ia-johns-hopkins-duke-university-etc.1248436/https://www.blackhatworld.com/seo/a...ey-making-methods-for-beginners.999534/unread

BassTrackerBoats · Aug 10, 2020

I don't see that:

Panther28 · Aug 10, 2020

Its like a blackhat bug, i just had it a moment ago, then i went to the homepage again, now its fine and secure. I'll watch for it happening again.

Degen · Aug 10, 2020

BassTrackerBoats said:
I don't see that:

check the links in the first post, those aren't secure. For me. neither are they on the VPS I am running.

nightbear · Aug 10, 2020

I agree with you OP sometimes it shows unprotected on my end too.

littleone · Aug 10, 2020

maybe MITM ? change your wifi password and scan pc for virus

BassTrackerBoats · Aug 10, 2020

Stewielenor said:
check the links in the first post, those aren't secure. For me. neither are they on the VPS I am running.

Strange - it says not secure but the SSL is live.

@Diamond Damien or @Jammie Dodger will pop in here or see this and look under the hood.

Degen · Aug 10, 2020

littleone said:
maybe MITM ? change your wifi password and scan pc for virus

My VPS is remotely located (France), Blackhatworld home page is secure, but those two links aren't I think there are more that are unsecured, but those are the only ones I can find at the moment as they're in my watched list.

yakuzaemme · Aug 10, 2020

BassTrackerBoats said:
Strange - it says not secure but the SSL is live.

@Diamond Damien or @Jammie Dodger will pop in here or see this and look under the hood.

Nothing to worry about. It's because the image(s) in those threads are served over http, thus not the entire page is SSL.
The important part though (communication with BHW servers) are served over SSL successfully.

PS @Jammie Dodger, Cloudflare supports automatic https rewrite which would fix this automatically.

693840 · Aug 10, 2020

The issue here is because the signature of @Monkey Duds contains en external image with HTTP instead of HTTPS, happened to my site too after I imported a demo theme

Jammie Dodger · Aug 10, 2020

yakuzaemme said:
PS @Jammie Dodger, Cloudflare supports automatic https rewrite which would fix this automatically.

Yep we have had that on for a long time

Cloudflare seems to be having a few problems performing that simple task lately

It is just because of the occasional insecure image

yakuzaemme · Aug 10, 2020

Jammie Dodger said:
Yep we have had that on for a long time

Cloudflare seems to be having a few problems performing that simple task lately

It is just because of the occasional insecure image

Interesting.

Might be overkill, but setting the header Content-Security-Policy to upgrade-insecure-requests would fix it in all major browsers.
https://caniuse.com/#search=upgrade insecure

Jammie Dodger · Aug 10, 2020

Cloudflare also doesn't fully rewrite http to https they use sources of data to determine if it can serve https which isn't majorly reliable.

yakuzaemme said:
Might be overkill, but setting the header Content-Security-Policy to upgrade-insecure-requests would fix it in all major browsers.

Needs a lot of testing but it is on the list

SSL certificate expired?

Degen

Elite Member

BassTrackerBoats

Support Admin

Panther28

Elite Member

Degen

Elite Member

nightbear

Newbie

littleone

Registered Member

BassTrackerBoats

Support Admin

Degen

Elite Member

yakuzaemme

Senior Member

693840

Banned - Inappropriate behavior

Jammie Dodger

BHW

yakuzaemme

Senior Member

Jammie Dodger

BHW

Main Menu

Marketplace

Making Money

BlackHat World