866986 - https://imgur.com/ broken due to mixed content

Status: RESOLVED FIXED

(Tech Evangelism Graveyard :: English US, defect)

Description

[Justin Dolske [:Dolske]]

The non-ssl version of imgur.com works fine. Going to https://imgur.com/ is extremely broken (no CSS, nonfunctional page).

Comment 1

[Tanvi Vyas[:tanvi]]

Also broken on chrome.  This is what is blocked:

Blocked loading mixed active content "http://s.imgur.com/min/global_css?1362528985" @ https://imgur.com/
Blocked loading mixed active content "http://s.imgur.com/min/gallery_css?1365806412" @ https://imgur.com/
Blocked loading mixed active content "http://s.imgur.com/min/global_js?1367547012" @ https://imgur.com/
Blocked loading mixed active content "http://s.imgur.com/min/gallery_js?1367273607" @ https://imgur.com/
Blocked loading mixed active content "http://s.imgur.com/min/index_js?1367540700" @ https://imgur.com/
Blocked loading mixed active content "http://tap-cdn.rubiconproject.com/partner/scripts/rubicon/alice.js?pc=8526/13802" @ https://imgur.com/
Blocked loading mixed active content "http://static.fmpub.net/site/imgur" @ https://imgur.com/
Blocked loading mixed active content "http://www.facebook.com/plugins/like.php?href=http://www.facebook.com/pages/Imgur/67691197470&show_faces=true&width=280&font=arial&colorscheme=dark" @ https://imgur.com/

How did you navigate to the https page?  Are you using HTTPS Everywhere?

Comment 2

[Justin Dolske [:Dolske]]

No idea how I originally got there, it got into my awesomebar somehow.

Comment 3

[Tanvi Vyas[:tanvi]]

(In reply to Justin Dolske [:Dolske] from comment #2)
> No idea how I originally got there, it got into my awesomebar somehow.

Perhaps it got into your awesome bar because of: https://bugzilla.mozilla.org/show_bug.cgi?id=769994.  (As an example, everytime I try to go to bing.com, my awesome bar takes me https://bing.com (because I tried it once upon a time).  I end up at an invalid cert page and have to change the location to http:// manually.)

Comment 4

[Tanvi Vyas[:tanvi]]

Anyone have a contact for imgur?  Via google I found http://imgur.com/contact and [e-mail].

Comment 5

[Tanvi Vyas[:tanvi]]

Chang just signed in and tested this.  When you are logged in an attempt to go to the ssl version of the page, it redirects you to the HTTP version.  This implies that the site is intended be visited over ssl.

The sign in page itself is HTTPS and works fine - https://imgur.com/signin.

Comment 6

[Tanvi Vyas[:tanvi]]

(In reply to Tanvi Vyas [:tanvi] from comment #4)
> Anyone have a contact for imgur?  Via google I found
> http://imgur.com/contact and [e-mail].

I filled out the contact for and also emailed alan@.

Comment 7

[Tanvi Vyas[:tanvi]]

Alan responded that they are working on resolving the issues.  And in the meantime, they are using redirects so that users who visit https://imgur.com are redirected back to http://imgur.com.

He mentioned the problem with the awesome bar defaulting to https, and I let him know about bugs https://bugzilla.mozilla.org/show_bug.cgi?id=769348 and https://bugzilla.mozilla.org/show_bug.cgi?id=769994 where that issue was fixed.

I think we can close this issue, since users can't make it to the https version without being redirected back to http.

Comment 8

[Adam Stevenson [:adamopenweb]]

Looks like they have fixed. Thanks Tanvi! :)