Bug: Posting to or reading a thread redirects to non-HTTPS site.

[Deozaan]

1. Be on the HTTPS site.
2. Navigate to forum and begin writing a new post/reply.
3. Click Post.
4. Observe that you are now on the non-HTTPS site.
5. ...
6. Profit!

[Deozaan]

Hmm, actually, it seems that the act of just reading any thread takes you to the non-HTTPS site.

Updated the topic to be more accurate.

[mouser]

Testing...
Doesn't happen here.  Post or read, I stay on https version of site.

[Stoic Joker]

I can't reproduce the behavior either.

[Ath]

@Deozaan, your logo links to a non-https image, could that be the cause of your issue?

[wraith808]

@Deozaan, your logo links to a non-https image, could that be the cause of your issue?

-Ath (March 14, 2018, 12:23 PM)

I think you're onto something; the security notice states that some images are not secure, and that attackers may be able to see the images you view from the site.

UPDATE: Actually, his logo seems to be hosted onsite, but the images in his .sig are not, and are not secure.

[Deozaan]

So all the rest of you can read this thread on the https site? If so, what happens to the images in my signature? I don't get any notice or prompt to allow non-https content. I just get automatically redirected to the fully non-https site when reading threads.

[tomos]

So all the rest of you can read this thread on the https site? If so, what happens to the images in my signature? I don't get any notice or prompt to allow non-https content. I just get automatically redirected to the fully non-https site when reading threads.

-Deozaan (April 04, 2018, 11:24 AM)

not a problem here:
once https it stays that way (will see shortly what happens when I post**)
All your signature icons are still visible.

** [EDIT//] still https

[Deozaan]

After further investigation it seems that maybe I just got confused by the lock icon in my address bar.

https://streamable.com/3h24l

It seems that because some of the content is insecure (such as my signature images), the lock disappears and shows only the normal globe icon. And since the address bar doesn't show the HTTPS:// part of the URL this behavior led me to believe the site was no longer on HTTPS. But if I try to copy and paste from the address bar, it does include HTTPS after all.

[wraith808]

I still get the i in a circle (information icon?) instead of the lock in chrome.  When I click on it, it says that my connection to this site is not fully secure.  Attackers may be able to see the images on this site and modify them.

[Deozaan]

Thanks for the help, everyone!

I'm closing this thread to prevent spammers from posting.