Homepage: Link to the Forum isn't https:// (anymore) -SOLVED-

Questions about other topics - please check if your question fits better in another category before posting here
Forum rules
Before you post read how to get help. Topics in this forum are automatically closed 6 months after creation.
Locked
Dr. Octagon
Level 2
Level 2
Posts: 97
Joined: Mon Sep 16, 2013 4:43 pm
Location: Osnabrooklyn

Homepage: Link to the Forum isn't https:// (anymore) -SOLVED-

Post by Dr. Octagon »

Hello,

can someone tell me, why the Forum-Link on the homepage (https://linuxmint.com/links.php) does not refer to https://forum but to http://forum instead?
Additionally: If you get to the forum via this link... the forum login will be unencrypted, too.

Cu
Dr. Octagon
Last edited by LockBot on Wed Dec 28, 2022 7:16 am, edited 3 times in total.
Reason: Topic automatically closed 6 months after creation. New replies are no longer allowed.
A good stumbler doesn't fall...
gm10

Re: Homepage: Link to the Forum isn't https:// (anymore)

Post by gm10 »

Probably an oversight. The unencrypted login aside, which is a problem, the forums don't even work properly in http:// - at least Chromium blocks https:// sourced images on an http:// site so things like e.g. the Mint logo won't even show. Frankly http:// access should just be disabled completely.

I'll send the forum admin a PM about this.
User avatar
xenopeek
Level 25
Level 25
Posts: 29507
Joined: Wed Jul 06, 2011 3:58 am

Re: Homepage: Link to the Forum isn't https:// (anymore)

Post by xenopeek »

I can't reproduce this. Using the HTTP link to either will result in the server sending back a HTTP 301 response, redirecting the web browser to use HTTPS instead.

Possibly the issue is related to web browser cache. I'd like to know which web browser you were using and whether you can reproduce this somewhere that you have not visited those links prior. Like, create a new user account on your Linux Mint system and log in to that and try the links from there. (or completely delete your web browser cache but that's heavy handed) That way your web browser will have a clean cache and won't interfere.

I tested also with curl to cut out anything the web browser might be doing (output of commands cut for brevity):

Code: Select all

$ curl -v http://forums.linuxmint.com
< HTTP/1.1 301 Moved Permanently
< Location: https://forums.linuxmint.com/

$ curl -v http://blog.linuxmint.com
< HTTP/1.1 301 Moved Permanently
< Location: https://blog.linuxmint.com/
Image
User avatar
catweazel
Level 19
Level 19
Posts: 9763
Joined: Fri Oct 12, 2012 9:44 pm
Location: Australian Antarctic Territory

Re: Homepage: Link to the Forum isn't https:// (anymore)

Post by catweazel »

xenopeek wrote: Mon Sep 24, 2018 12:33 am I can't reproduce this.
I can. The link from https://linuxmint.com/links.php points to forums.linuxmint.com, without the protocol being specified, which causes the browser to not use https:// hence people clicking on the link from that page get an insecure connection.

Image

Note the lack of protocol being specified.
"There is, ultimately, only one truth -- cogito, ergo sum -- everything else is an assumption." - Me, my swansong.
kukamuumuka

Re: Homepage: Link to the Forum isn't https:// (anymore)

Post by kukamuumuka »

catweazel wrote: Mon Sep 24, 2018 1:34 am I can. The link from https://linuxmint.com/links.php points to forums.linuxmint.com,
I can also.
http-forums.jpg
gm10

Re: Homepage: Link to the Forum isn't https:// (anymore)

Post by gm10 »

xenopeek wrote: Mon Sep 24, 2018 12:33 am I tested also with curl to cut out anything the web browser might be doing (output of commands cut for brevity):

Code: Select all

$ curl -v http://forums.linuxmint.com
< HTTP/1.1 301 Moved Permanently
< Location: https://forums.linuxmint.com/
Not what I'm getting:

Code: Select all

$ curl -v http://forums.linuxmint.com
* Connected to forums.linuxmint.com (192.124.249.8) port 80 (#0)
> User-Agent: curl/7.58.0
*< HTTP/1.1 200 OK
Also confirming the issue with Firefox 63 beta and all Chromium-based browsers.
xenopeek wrote: Mon Sep 24, 2018 12:33 am

Code: Select all

$ curl -v http://blog.linuxmint.com
< HTTP/1.1 301 Moved Permanently
< Location: https://blog.linuxmint.com/
This one I can confirm, but we didn't flag that as a problem in the first place. On the other hand, the link to The Chat Room also won't redirect to https://. Suggest you just change all the links on that page to https:// out of principle.
User avatar
xenopeek
Level 25
Level 25
Posts: 29507
Joined: Wed Jul 06, 2011 3:58 am

Re: Homepage: Link to the Forum isn't https:// (anymore)

Post by xenopeek »

I have a suspicion. Can those with this issue run this command and share its output?
ping -c1 forums.linuxmint.com
Image
gm10

Re: Homepage: Link to the Forum isn't https:// (anymore)

Post by gm10 »

xenopeek wrote: Mon Sep 24, 2018 5:52 am I have a suspicion. Can those with this issue run this command and share its output?
ping -c1 forums.linuxmint.com
I have the same suspicion, that why I already included the IP in my curl output above. CDNs are fun. ;)
User avatar
catweazel
Level 19
Level 19
Posts: 9763
Joined: Fri Oct 12, 2012 9:44 pm
Location: Australian Antarctic Territory

Re: Homepage: Link to the Forum isn't https:// (anymore)

Post by catweazel »

xenopeek wrote: Mon Sep 24, 2018 5:52 am I have a suspicion. Can those with this issue run this command and share its output?
ping -c1 forums.linuxmint.com

Code: Select all

~ $: ping -c1 forums.linuxmint.com
PING forums.linuxmint.com (192.124.249.8) 56(84) bytes of data.
64 bytes from cloudproxy10008.sucuri.net (192.124.249.8): icmp_seq=1 ttl=54 time=176 ms

--- forums.linuxmint.com ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 176.865/176.865/176.865/0.000 ms
I spy... cdn.
"There is, ultimately, only one truth -- cogito, ergo sum -- everything else is an assumption." - Me, my swansong.
User avatar
xenopeek
Level 25
Level 25
Posts: 29507
Joined: Wed Jul 06, 2011 3:58 am

Re: Homepage: Link to the Forum isn't https:// (anymore)

Post by xenopeek »

gm10 wrote: Mon Sep 24, 2018 3:02 am Not what I'm getting:

Code: Select all

$ curl -v http://forums.linuxmint.com
* Connected to forums.linuxmint.com (192.124.249.8) port 80 (#0)
> User-Agent: curl/7.58.0
*< HTTP/1.1 200 OK
Even if I do curl -v forums.linuxmint.com it sends me the https redirect. I'm on the same Sucuri server as both of you so I'm stumped. I'll carry this up the chain to find an explanation. I mean, we'll update the website but that doesn't help people typing it manually. Sucuri should do a catchall redirect.
Image
gm10

Re: Homepage: Link to the Forum isn't https:// (anymore)

Post by gm10 »

xenopeek wrote: Mon Sep 24, 2018 6:12 am Sucuri should do a catchall redirect.
True but you could also force a redirect on the server instead or in addition, or at the very least force your login form to post to a https:// destination.
Laurent85
Level 17
Level 17
Posts: 7081
Joined: Tue May 26, 2015 10:11 am

Re: Homepage: Link to the Forum isn't https:// (anymore)

Post by Laurent85 »

A Sucuri issue, one of their proxy is outdated.

From my ISP, http accepted:

Code: Select all

curl -v http://forums.linuxmint.com
* Connected to forums.linuxmint.com (192.124.249.8) port 80 (#0)
> GET / HTTP/1.1
> Host: forums.linuxmint.com
> Accept: */*
> 
< HTTP/1.1 200 OK
< Server: Sucuri/Cloudproxy
< Date: Mon, 24 Sep 2018 10:33:25 GMT
< Content-Type: text/html; charset=UTF-8
< Transfer-Encoding: chunked
< Connection: keep-alive
< X-Sucuri-ID: 15008
From a different network using Tor, redirected to https:

Code: Select all

torify curl -v http://forums.linuxmint.com
Connected to forums.linuxmint.com (192.124.249.8) port 80 (#0)
> GET / HTTP/1.1
> Host: forums.linuxmint.com
> Accept: */*
> 
< HTTP/1.1 301 Moved Permanently
< Server: Sucuri/Cloudproxy
< Date: Mon, 24 Sep 2018 10:28:13 GMT
< Content-Type: text/html
< Content-Length: 178
< Connection: keep-alive
< Location: https://forums.linuxmint.com/
< X-XSS-Protection: 1; mode=block
< X-Frame-Options: SAMEORIGIN
< X-Content-Type-Options: nosniff
< X-Sucuri-ID: 13008
Image
gm10

Re: Homepage: Link to the Forum isn't https:// (anymore)

Post by gm10 »

Laurent85 wrote: Mon Sep 24, 2018 6:54 am A Sucuri issue, one of their proxy is outdated.
From a different network using Tor, redirected to https:
To narrow it down, using Opera's built-in VPN, the European endpoint receives http:// only, the Asian and American endpoints get redirected to https://
User avatar
xenopeek
Level 25
Level 25
Posts: 29507
Joined: Wed Jul 06, 2011 3:58 am

Re: Homepage: Link to the Forum isn't https:// (anymore)

Post by xenopeek »

And I'm in Europe not using any VPN... :lol:
Image
gm10

Re: Homepage: Link to the Forum isn't https:// (anymore)

Post by gm10 »

xenopeek wrote: Mon Sep 24, 2018 8:06 am And I'm in Europe not using any VPN... :lol:
Hah. Let me correct my previous post:
gm10 wrote: Mon Sep 24, 2018 7:11 am To narrow it down add to the confusion
:mrgreen:

Probably just load balancing in Europe though that masks this.
User avatar
karlchen
Level 23
Level 23
Posts: 18177
Joined: Sat Dec 31, 2011 7:21 am
Location: Germany

Re: Homepage: Link to the Forum isn't https:// (anymore)

Post by karlchen »

catweazel wrote: Mon Sep 24, 2018 1:34 am Image
Note the lack of protocol being specified.
This is merely caused by one of your Firefox settings. (browser.urlbar.trimURLs=true)
Mine tells me: http://forums.linuxmint.com/ (browser.urlbar.trimURLs=false)
Image
The people of Alderaan have been bravely fighting back the clone warriors sent out by the unscrupulous Sith Lord Palpatine for 762 days now.
Lifeline
gm10

Re: Homepage: Link to the Forum isn't https:// (anymore)

Post by gm10 »

karlchen wrote: Mon Sep 24, 2018 8:16 am This is merely caused by one of your Firefox settings. (browser.urlbar.trimURLs=true)
For what it's worth, on chromium browsers: chrome://flags/#omnibox-ui-hide-steady-state-url-scheme-and-subdomains
User avatar
xenopeek
Level 25
Level 25
Posts: 29507
Joined: Wed Jul 06, 2011 3:58 am

Re: Homepage: Link to the Forum isn't https:// (anymore)

Post by xenopeek »

We've updated all the links on the https://linuxmint.com/links.php page, to add https where websites support it. Thanks for letting us know!

The redirect to https sometimes not happening is upstream to us and likely affects many more websites besides us. We'll have to wait a bit how that resolves. At least people coming here through links on the homepage will now be sent correctly to https.
Image
Dr. Octagon
Level 2
Level 2
Posts: 97
Joined: Mon Sep 16, 2013 4:43 pm
Location: Osnabrooklyn

Re: Homepage: Link to the Forum isn't https:// (anymore) -SOLVED-

Post by Dr. Octagon »

Thanks!

Works fine now.

Cu
Dr. Octagon
A good stumbler doesn't fall...
User avatar
xenopeek
Level 25
Level 25
Posts: 29507
Joined: Wed Jul 06, 2011 3:58 am

Re: Homepage: Link to the Forum isn't https:// (anymore) -SOLVED-

Post by xenopeek »

As a further update the issue with http not always redirecting to https looks to have been solved today. Manually typing the http link or opening the http link from a bookmark should automatically get redirected to https.
Image
Locked

Return to “Other topics”