Skip to content

GitLab

  • Menu
Projects Groups Snippets
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in
  • H HTTPS Everywhere EFF
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Issues 251
    • Issues 251
    • List
    • Boards
    • Service Desk
    • Milestones
  • Monitor
    • Monitor
    • Incidents
  • Analytics
    • Analytics
    • Value stream
  • Activity
  • Create a new issue
  • Issue Boards
Collapse sidebar
  • The Tor Project
  • Applications
  • HTTPS Everywhere EFF
  • Issues
  • #10576
Closed
Open
Created Jan 07, 2014 by Trac@tracbot

Updated ruleset partially breaks stackexchange even with mixed content rule disabled

HTTPS Everywhere (Firefox Extension) Version: 3.4.5 Firefox: 26.0 64 bit build for GNU/Linux (Mozilla's own build)

Relevant rules:

  • Stack Exchange (partial) is enabled
  • Google APIs is enabled
  • Stack Exchange (mixed content) is disabled
  • Quantcast is disabled

I can view some Stack Exchange sites partially but on others I get a Firefox "get me out of here" warning. All sites worked fine until I restarted Firefox. Firefox was not updated, though - only HTTPS Everywhere. Based on https://meta.stackoverflow.com/questions/214968/cant-login-with-stack-exchange-openid-when-https-everywhere-plugin-is-active I would have assumed this is a known issue to do with mixed content but the only tickets I could find were closed as fixed and, moreover, I have the mixed content rule disabled already.

Examples:

https://tex.stackexchange.com/questions/152756/logic-tree-with-tikz-tree-placing-nodes-on-specific-places: I can view this page but I cannot view the images inline. I see the alternative text description. If I open the image as a page-in-itself, I can view it fine.

https://meta.tex.stackexchange.com/: If I try to visit this page, I get a warning dialogue. (Translated) the title is "No trust for this connection" (sorry - I guess that's not the exact English equivalent). For clarification, it starts (roughly) "You have asked Firefox to connect securely to meta.tex.stackexchange.com, but we cannot confirm that the connection is secure. As a rule..." etc.

I am guessing this is an HTTPS Everywhere issue but, if not, please let me know if you know where I should report it instead.

Trac:
Username: cfr

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information
Assignee
Assign to
Time tracking