Forum will no longer display insecure images

Releases and other announcements.
Please don't post support questions here
Forum rules
Section reserved for the team. You can reply to announcements here but not post new topics.Please do not add support questions to threads here,use the appropriate support forum instead
Post Reply
User avatar
xenopeek
Level 24
Level 24
Posts: 22273
Joined: Wed Jul 06, 2011 3:58 am
Location: The Netherlands

Forum will no longer display insecure images

Post by xenopeek » Thu May 24, 2018 9:33 am

A small change was done on the forum so that insecure images will no longer be displayed for most visitors. This avoids the mixed content warning visitors' web browsers would otherwise give them if an image in the topic they were viewing used a insecure HTTP link instead of a secure HTTPS link. This should mostly affect old topics as most image hosting websites these days use secure links.

Notably this change only works on standards compliant web browsers. Internet Explorer, and possibly very old versions of other web browsers, is unaffected by this change and will still display insecure images.

As a test I've added an insecure image of the Earth below this line. It shouldn't be displayed unless using a web browser that isn't standards compliant.
Image
Image

User avatar
Spearmint2
Level 15
Level 15
Posts: 5705
Joined: Sat May 04, 2013 1:41 pm
Location: Maryland, USA

Re: Forum will no longer display insecure images

Post by Spearmint2 » Thu May 24, 2018 8:19 pm

that kills all images I post on my FTP site to forum.
All things go better with Mint. Mint julep, mint jelly, mint gum, candy mints, pillow mints, peppermint, chocolate mints, spearmint,....

User avatar
catweazel
Level 14
Level 14
Posts: 5443
Joined: Fri Oct 12, 2012 9:44 pm
Location: Australian Antarctic Territory

Re: Forum will no longer display insecure images

Post by catweazel » Thu May 24, 2018 8:57 pm

Spearmint2 wrote:
Thu May 24, 2018 8:19 pm
that kills all images I post on my FTP site to forum.
Oh well.

https://imgbb.com/
A new scientific truth does not triumph by convincing its opponents and making them see the light, but rather because its opponents eventually die, and a new generation grows up that is familiar with it. - Max Planck

User avatar
sdibaja
Level 5
Level 5
Posts: 515
Joined: Sun May 08, 2011 12:57 pm
Location: Baja California, Mexico

Re: Forum will no longer display insecure images

Post by sdibaja » Thu May 24, 2018 10:19 pm

catweazel wrote:
Thu May 24, 2018 8:57 pm
Spearmint2 wrote:
Thu May 24, 2018 8:19 pm
that kills all images I post on my FTP site to forum.
Oh well.

https://imgbb.com/
nice gadget! thanks

Image
====
this forum needs BBCode
Image

User avatar
xenopeek
Level 24
Level 24
Posts: 22273
Joined: Wed Jul 06, 2011 3:58 am
Location: The Netherlands

Re: Forum will no longer display insecure images

Post by xenopeek » Fri May 25, 2018 1:51 am

Spearmint2 wrote:
Thu May 24, 2018 8:19 pm
that kills all images I post on my FTP site to forum.
Do you use that a lot? I can understand wanting to retain control over your images. You can of course post the link to an image on your FTP site. You just can't use it inside the img or rimg tags here. If you use it a lot and don't want to go the imgbb.com route I'd suggest to set up web server and use https://letsencrypt.org/ to register, and automate installation and updating, of a HTTPS certificate.
Image

User avatar
Pjotr
Level 20
Level 20
Posts: 10206
Joined: Mon Mar 07, 2011 10:18 am
Location: The Netherlands (Holland)
Contact:

Re: Forum will no longer display insecure images

Post by Pjotr » Fri May 25, 2018 6:59 am

Good measure. A small discomfort, but it helps to build confidence in the security of the Linux Mint ecosystem. :)
Tip: 10 things to do after installing Linux Mint 19 Tara
Keep your Linux Mint healthy: Avoid these 10 fatal mistakes
Twitter: twitter.com/easylinuxtips
All in all, horse sense simply makes sense.

User avatar
Spearmint2
Level 15
Level 15
Posts: 5705
Joined: Sat May 04, 2013 1:41 pm
Location: Maryland, USA

Re: Forum will no longer display insecure images

Post by Spearmint2 » Fri May 25, 2018 9:47 am

xenopeek wrote:
Fri May 25, 2018 1:51 am
Spearmint2 wrote:
Thu May 24, 2018 8:19 pm
that kills all images I post on my FTP site to forum.
Do you use that a lot? I can understand wanting to retain control over your images. You can of course post the link to an image on your FTP site.
Yes, link is what I use on another forum I frequent after they went to https images only. I may set SSL or TLS up on my server account someday, been too lazy to do it yet. I don't understand the purpose of going https for images.
All things go better with Mint. Mint julep, mint jelly, mint gum, candy mints, pillow mints, peppermint, chocolate mints, spearmint,....

User avatar
trytip
Level 6
Level 6
Posts: 1418
Joined: Tue Jul 05, 2016 1:20 pm

Re: Forum will no longer display insecure images

Post by trytip » Fri May 25, 2018 9:57 am

Spearmint2 wrote:
Fri May 25, 2018 9:47 am
... I don't understand the purpose of going https for images.
it makes a full HTTPS website be in mixed mode (http/https) causing it to be less secure and have the ability for third party trackers to piggyback on these http links. same concept as using https everywhere addon
Image

User avatar
MtnDewManiac
Level 6
Level 6
Posts: 1303
Joined: Fri Feb 22, 2013 5:18 pm
Location: United States

Re: Forum will no longer display insecure images

Post by MtnDewManiac » Fri May 25, 2018 6:58 pm

Spearmint2 wrote:
Thu May 24, 2018 8:19 pm
that kills all images I post on my FTP site to forum.
Can you use SFTP or FTPS? And, if so, would that work (for purposes of this discussion)?

Regards,
MDM
Mint 18 Xfce 4.12.

If guns kill people, then pencils misspell words, cars make people drive drunk, and spoons made Rosie O'Donnell fat.

User avatar
Spearmint2
Level 15
Level 15
Posts: 5705
Joined: Sat May 04, 2013 1:41 pm
Location: Maryland, USA

Re: Forum will no longer display insecure images

Post by Spearmint2 » Fri May 25, 2018 8:12 pm

MtnDewManiac wrote:
Fri May 25, 2018 6:58 pm
Spearmint2 wrote:
Thu May 24, 2018 8:19 pm
that kills all images I post on my FTP site to forum.
Can you use SFTP or FTPS? And, if so, would that work (for purposes of this discussion)?

Regards,
MDM
an Idea, but I think the software in most forums just look for the https:// and my FTP server isn't an open one, meaning it needs name and password to access.
All things go better with Mint. Mint julep, mint jelly, mint gum, candy mints, pillow mints, peppermint, chocolate mints, spearmint,....

User avatar
AZgl1500
Level 6
Level 6
Posts: 1371
Joined: Thu Dec 31, 2015 3:20 am
Location: /Home/Desktop
Contact:

Re: Forum will no longer display insecure images

Post by AZgl1500 » Fri May 25, 2018 9:50 pm

just checked, and www.imgur.com is https

Image

User avatar
trytip
Level 6
Level 6
Posts: 1418
Joined: Tue Jul 05, 2016 1:20 pm

Re: Forum will no longer display insecure images

Post by trytip » Fri May 25, 2018 11:18 pm

imgur is both http/https so when posting here you have to make sure the s in https is there otherwise you will get the image holder only
Image

but shouldn't the link also be disabled?
Image

User avatar
Spearmint2
Level 15
Level 15
Posts: 5705
Joined: Sat May 04, 2013 1:41 pm
Location: Maryland, USA

Re: Forum will no longer display insecure images

Post by Spearmint2 » Fri May 25, 2018 11:31 pm

trytip wrote:
Fri May 25, 2018 11:18 pm
imgur is both http/https so when posting here you have to make sure the s in https is there otherwise you will get the image holder only
Image

but shouldn't the link also be disabled?
They probably forgot to use the 301 area in their DNS to aim all http requests to https instead. It allows older http links to still work, supposedly, not tried it myself. Chrome 68 will label all http pages as "unsecure" and block them.
All things go better with Mint. Mint julep, mint jelly, mint gum, candy mints, pillow mints, peppermint, chocolate mints, spearmint,....

User avatar
mwbworld
Level 2
Level 2
Posts: 95
Joined: Fri Aug 19, 2016 10:55 am
Location: Boston, MA

Re: Forum will no longer display insecure images

Post by mwbworld » Sat May 26, 2018 8:42 am

Really I'm as compassionate as the next person, but do we need to worry about the emotional state ("insecure") of images! :D

(I'll go sit in the corner now...)
- Michael

User avatar
Moem
Level 15
Level 15
Posts: 5846
Joined: Tue Nov 17, 2015 9:14 am
Location: The Netherlands
Contact:

Re: Forum will no longer display insecure images

Post by Moem » Sat May 26, 2018 9:14 am

mwbworld wrote:
Sat May 26, 2018 8:42 am
Really I'm as compassionate as the next person, but do we need to worry about the emotional state ("insecure") of images! :D
I'm the next person and I'm much more compassionate than you.

(I'll join you in the corner.)
Image

If your issue is solved, kindly indicate that by editing the first post in the topic, and adding [SOLVED] to the title. Thanks!

Post Reply

Return to “Releases & Announcements”