HTTPS-Only Mode Alerts

[Jeff]

Sometimes I get these warnings at random in Firefox,

HTTPS-Only Mode Alert
Secure Site Not Available

You’ve enabled HTTPS-Only Mode for enhanced security, and a HTTPS version of duckandcover.cx is not available.

Learn More…
What could be causing this?

Most likely, the website simply does not support HTTPS.
It’s also possible that an attacker is involved. If you decide to visit the website, you should not enter any sensitive information like passwords, emails, or credit card details.

If you continue, HTTPS-Only Mode will be turned off temporarily for this site.

I had one of these just now, then I closed and reopened the browser and entered the same URL again and didn't get the warning and https is working fine

[Hyacinth]

`:O

[Echo]

It appears that the website "duckandcover.cx" does not support HTTPS (Hypertext Transfer Protocol Secure), which is used to encrypt data transmitted between your browser and the website.

This could be due to various reasons:

• The website may not have implemented HTTPS support.

• The website might be using an outdated or insecure encryption protocol.

• There could be issues with the website's SSL/TLS certificate.

As the alert suggests, it's essential to exercise caution when visiting websites that do not support HTTPS, especially if you are required to enter sensitive information. Without HTTPS, data transmitted between your device and the website is not encrypted, making it vulnerable to interception by malicious actors.

[Jeff]

sometimes it does though that's the weird part (verified by Let's Encrypt), i never log in when it says it doesn't

[Echo]

I've experienced similar quirks in security measures. It can be puzzling when it doesn't align with what we expect.

[Jeff]

I don't expect much when it comes to DAC, it's a miracle the site works at all at this point

Just thought @Taluntain might appreciate the heads-up, I'd tag him but I can't because we're not on Xenforo even though I got the impression that upgrading to Xenforo was an absolute must for security reasons funnily enough (I'm just teasing you Taluntain if you ever read this)

[Hyacinth]

Haha @TALUNTAIN

[Taluntain]

I don't expect much when it comes to DAC, it's a miracle the site works at all at this point

Just thought @Taluntain might appreciate the heads-up, I'd tag him but I can't because we're not on Xenforo even though I got the impression that upgrading to Xenforo was an absolute must for security reasons funnily enough (I'm just teasing you Taluntain if you ever read this)

That's odd, because I'm also on Firefox and I've never seen this behaviour here. Record the url and time when this happens for you next and/or make a screenshot for me to look into.

As far as security goes, the upgrade to phpBB3 was enough to tide us over. It's just that it's a shitty bare-bones forum software that's the problem, hence the need to upgrade to XF eventually.

[Jeff]

I'll try to remember! I have the "Enable HTTPS-Only Mode in all windows" setting enabled so that's what's causing it the alert I'm sure, on most sites I just bypass it but I feel iffy about submitting passwords over http, this is my life's work we're talking about here after all

[Taluntain]

The site's been on non-www https for quite some time now, but I think that I haven't forced redirects from non-https yet. So you're probably hitting some old bookmarks or links that are causing that to show.

I'm consistently using https://duckandcover.cx/* and haven't seen any issues to date, so update your bookmarks to that format.

[Echo]

Cool.

[Jeff]

Record the url and time when this happens for you next and/or make a screenshot for me to look into.

Like 4 minutes ago, 23:12 local time or so, refreshed the page a couple of times and the alert went away again
Anyway, it's a non-issue from my standpoint as it's pretty rare, but maybe you want to look into it, maybe you don't :shrug:

hosting images
edit: forgot to screenshot the lock icon certificate thingy, i'll try to remember it next time
edit2: imgbb deleting my pictures now? reuploaded

[Taluntain]

You can send the screenshot to my email, it seems imgbb won't work.

[Jeff]

i'll do that next time, picture's buried in my recycle bin by now

[Hyacinth]

Yea they are pretty short lived. ):

[Jeff]

https://we.tl/t-sl09sTTYvg
i can't find your email address, you have exactly 1 week until these pictures self-destruct
edit: you have one more week
edit2: last call

[Taluntain]

Yea, that didn't work. The mail's sorcerer on my domain.