Board index Other Forum

https in image links

Questions about the forum itself, suggestions or issues with the forum software.

https in image links

Postby erik » Sun Jan 26, 2020 10:27 am

Hi,

It looks like the form software links to https pages/images only even if the link is given as http

This can cause problems with images not showing because the certificate doesn't match the website url link for an image. Therefor I provide the http link and not the secure https one. The same happens to images linked to by Thorsten.

Could this be changed at least for images?
There is not much value in enforcing secure links to images I would argue.
Current: Parachutist, Paraglider, Pterosaur, Pilatus PC-9M and variants, ERCO Ercoupe, Fokker Dr.1, Fokker 50, Fokker 100
Less active: Cessna T-37, T-38, Santa Claus. Previous: General Dynamics F-16. Worked on: Wright Flyer
erik
 
Posts: 2245
Joined: Thu Nov 01, 2007 2:41 pm

Re: https in image links

Postby Gijs » Tue Jan 28, 2020 3:16 pm

Hi Erik,

Can you give a link to an example (post)? I see plenty of both http and https images showing up just fine.

Gijs
Airports: EHAM, EHLE, KSFO
Aircraft: 747-400
User avatar
Gijs
Moderator
 
Posts: 9544
Joined: Tue Jul 03, 2007 3:55 pm
Location: Delft, the Netherlands
Callsign: PH-GYS
Version: Git
OS: Windows 10

Re: https in image links

Postby erik » Tue Jan 28, 2020 3:18 pm

This one doesn't show for me:
viewtopic.php?f=88&t=36739&start=15#p360458

Erik
Current: Parachutist, Paraglider, Pterosaur, Pilatus PC-9M and variants, ERCO Ercoupe, Fokker Dr.1, Fokker 50, Fokker 100
Less active: Cessna T-37, T-38, Santa Claus. Previous: General Dynamics F-16. Worked on: Wright Flyer
erik
 
Posts: 2245
Joined: Thu Nov 01, 2007 2:41 pm

Re: https in image links

Postby Isaak » Tue Jan 28, 2020 3:50 pm

I do see it
Want to support medical research with your pc? Start Folding at Home and join team FlightGear!
Isaak
 
Posts: 768
Joined: Sat Jun 04, 2011 3:52 pm
Location: Hamme, Belgium
Pronouns: he, him
Callsign: OO-ISA
Version: next
OS: Windows 10

Re: https in image links

Postby bugman » Tue Jan 28, 2020 6:44 pm

Note that some browsers on some operating systems block embedded https content on http pages, and vice versa. Some camps believe that improves security. I had it once (Firefox on Linux). A simple Google search should show how you can adjust your browser settings to not be such a pain in the butt.

Regards,
Edward
bugman
Moderator
 
Posts: 1808
Joined: Thu Mar 19, 2015 10:01 am
Version: next

Re: https in image links

Postby erik » Wed Jan 29, 2020 12:46 pm

Hm, okay.
They are accessible, but just print the message "image" with an URL to the image instead of showing the image inline.

Erik
Current: Parachutist, Paraglider, Pterosaur, Pilatus PC-9M and variants, ERCO Ercoupe, Fokker Dr.1, Fokker 50, Fokker 100
Less active: Cessna T-37, T-38, Santa Claus. Previous: General Dynamics F-16. Worked on: Wright Flyer
erik
 
Posts: 2245
Joined: Thu Nov 01, 2007 2:41 pm

Re: https in image links

Postby wkitty42 » Wed Jan 29, 2020 2:27 pm

what happens if you manually visit the link and then come back and read the original message? so you then see the image?
"You get more air close to the ground," said Angalo. "I read that in a book. You get lots of air low down, and not much when you go up."
"Why not?" said Gurder.
"Dunno. It's frightened of heights, I guess."
User avatar
wkitty42
 
Posts: 9148
Joined: Fri Feb 20, 2015 4:46 pm
Location: central NC, USA
Callsign: wk42
Version: git next
OS: Kubuntu 20.04

Re: https in image links

Postby erik » Wed Jan 29, 2020 4:02 pm

That does not work either. The only thing I could find consistent was non-matching SSL certificates on those sites in those cases.

Erik
Current: Parachutist, Paraglider, Pterosaur, Pilatus PC-9M and variants, ERCO Ercoupe, Fokker Dr.1, Fokker 50, Fokker 100
Less active: Cessna T-37, T-38, Santa Claus. Previous: General Dynamics F-16. Worked on: Wright Flyer
erik
 
Posts: 2245
Joined: Thu Nov 01, 2007 2:41 pm

Re: https in image links

Postby Gijs » Wed Jan 29, 2020 4:44 pm

Like Edward said, some browsers do block mixed content (that is, when a site like the forum is loaded over a HTTPS connection, it is not allowed to include HTTP content from other websites). That's not specific to our forum. Images are considered low-risk btw, since they only allow passive attacks (e.g. someone replacing an image by another image or using the image to track your visits to certain pages).

If the SSL certificates are non-matching, that'd be a problem with the respective images' hosts. I did notice that my university for example also blocks certain image hosts due to bad certificates.
Airports: EHAM, EHLE, KSFO
Aircraft: 747-400
User avatar
Gijs
Moderator
 
Posts: 9544
Joined: Tue Jul 03, 2007 3:55 pm
Location: Delft, the Netherlands
Callsign: PH-GYS
Version: Git
OS: Windows 10


Return to Forum

Who is online

Users browsing this forum: No registered users and 1 guest