Broken (Invalidated) HTTPS on the main web-site
Posted: 27 May 2017 20:53
I could not find the relevant mailing list, therefore I post this here. If you know how to, please relate this to the relevant people.
Few pages on the main web-site http://www.videolan.org has a few pages with HTTP links, although those pages and resources are available over HTTPS. This creates a potential problem (user leaving secure HTTPS) and breaks Chrome's security validation (no green padlock next on the left of the address bar).
This issue is misleading people, like in https://forum.videolan.org/viewtopic.php?f=10&t=134384.
Here the pages without a padlock:
List is in the comments because of limit of 5 URLs per post.
Issue and Fix:
The source and page links have "http://" hardwritten in, instead of "//".
Please note that HTTPS Everywhere from Electronic Frontier Foundation automatically rewrites the links to HTTPS (and everything works properly), so fix is as simple as replacing "http://" with "//".
Few pages on the main web-site http://www.videolan.org has a few pages with HTTP links, although those pages and resources are available over HTTPS. This creates a potential problem (user leaving secure HTTPS) and breaks Chrome's security validation (no green padlock next on the left of the address bar).
This issue is misleading people, like in https://forum.videolan.org/viewtopic.php?f=10&t=134384.
Here the pages without a padlock:
- The downloads page https://www.videolan.org/vlc/download-sources.html
- The VideoLAN Goodies page https://www.videolan.org/goodies.html
List is in the comments because of limit of 5 URLs per post.
Issue and Fix:
The source and page links have "http://" hardwritten in, instead of "//".
Please note that HTTPS Everywhere from Electronic Frontier Foundation automatically rewrites the links to HTTPS (and everything works properly), so fix is as simple as replacing "http://" with "//".