Skip to main content

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
Re: [cross-project-issues-dev] [wtp-dev] Website links to wiki are not working with HTTP

What you point to is only about marking HTTP sites as not secure.

Dani



From:        Joakim Erdfelt <joakim.erdfelt@xxxxxxxxx>
To:        Cross project issues <cross-project-issues-dev@xxxxxxxxxxx>
Cc:        "General discussion of project-wide or architectural issues." <wtp-dev@xxxxxxxxxxx>
Date:        11.01.2017 14:37
Subject:        Re: [cross-project-issues-dev] [wtp-dev] Website links to wiki are not working with HTTP
Sent by:        cross-project-issues-dev-bounces@xxxxxxxxxxx




This behavior of Chrome was announced.

https://security.googleblog.com/2016/09/moving-towards-more-secure-web.html

Also of note, on Jan 1, 2017, all SHA0 and SHA1 ciphers and certificates are now rejected by Chrome (as well as Firefox, Edge, amongst others).


On Wed, Jan 11, 2017 at 8:10 AM, Patrik Suzzi <psuzzi@xxxxxxxxx> wrote:
Kaloyan, 

Thanks for confirming. This seems a large-scale issue with Chrome and HTTP vs HTTPS. 

Note: I also observed that the HTTP links are working in incognito mode. 

All, 

I'm forwarding this e-mail to the cross-project mailing list as this issue should impact many projects.

Indeed, the Eclipse wiki links are not working on Chrome with HTTP, but they work only with HTTPS.

The reason is Chrome considers insecure the HTTP connection to wiki.eclipse.org
see: http://imgur.com/iz2ZAqR.png

I think we should report a bug against Eclipse wiki, perhaps depends on the wiki server configuration.

For the Eclipse WTP Website, a short term solution is changing all the links from HTTP to HTTPS, like I did here: https://git.eclipse.org/r/#/c/88396/

Best Regards,

Ing. Patrik Suzzi
Consultant Software Engineer,
Eclipse Platform Committer
https://about.me/psuzzi



On Wed, Jan 11, 2017 at 12:43 PM, Kaloyan Raev <kaloyan.r@xxxxxxxx> wrote:
Hi Patrik,

The problem happens to me too with Chrome on Fedora, but not with Firefox on Fedora.

The problem happens with ANY wiki page at
wiki.eclipse.org, so it is not specific just to the WTP wiki pages.

It seems to be an infrastructure issue - something is not perfect with the http -> https redirection.


Kaloyan Raev
| Zend Studio Team Lead
Rogue Wave Software, Inc.
Accelerating Great Code

M
+359 887 648 663
www.roguewave.com/ kaloyan.raev@xxxxxxxxxxxxx

On 01/11/2017 01:31 PM, Patrik Suzzi wrote:
Hi All, 

With Google Chrome on Windows, all the HTTP links from the Eclipse WebTools pages are not working. Only the HTTPS links are working.

As an example:
Open https://eclipse.org/webtools/jsdt/ and click on the "Wiki' link. This opens a blank page.
see image: http://imgur.com/euxWSkQ.png

Note:
when I open the page http://wiki.eclipse.org/JSDT I see a blank page.
I can see the wiki page only using the HTTPS protocol. 

Details.
I verified this problem occurs only in Chrome for windows. 
The problem does not happen in Chrome for Mac.
The problem does not happen in Firefox and Explorer for Windows. 

As Chrome for windows probably represents the 33% of website users, I write to show the issue and ask: How many other Chrome users on windows (or Linux) have the same problem?

Best Regards,

Ing. Patrik Suzzi
Consultant Software Engineer,
Eclipse Platform Committer
https://about.me/psuzzi

mobile: +39 333 3979300


_______________________________________________
wtp-dev mailing list
wtp-dev@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/wtp-dev


_______________________________________________
wtp-dev mailing list

wtp-dev@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit

https://dev.eclipse.org/mailman/listinfo/wtp-dev


_______________________________________________
cross-project-issues-dev mailing list

cross-project-issues-dev@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit

https://dev.eclipse.org/mailman/listinfo/cross-project-issues-dev
_______________________________________________
cross-project-issues-dev mailing list
cross-project-issues-dev@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/cross-project-issues-dev



Back to the top