1

Absolutely no images working since late 2015. [HTTPS Issue]

Devee's Avatar Devee2/23/16 11:31 am
1 emeralds 373 6
2/24/2016 9:25 am
Willsr71's Avatar Willsr71
Hey.

I'm a user of HTTPS Everywhere.

https://www.eff.org/https-everywhere

It is a security plugin for Firefox, Google Chrome, and Opera, which forces HTTPS connections over HTTP connections. Basically, if a website can load in HTTPS, it should.

------------------


Whenever I look at a page for anything - a server, a mod, a skin, or a texturepack, none of the images are displaying.



This is the URL that is being loaded when attempting to load the Sphax image, with the HTTPS Everywhere plugin enabled:

https://static.planetminecraft.com/file ... _thumb.jpg

Please note that the link redirects to a "Cloudflare: This Website Is Offline"

When disabling HTTPS Everywhere, pages load correctly from the http://static.planetminecraft.com website - please note the http and the lack of https.

How this could be fixed:

-Planet Minecraft fixes their HTTPS issue with static.planetminecraft.com
-HTTPS Everywhere issues a new release that disables HTTPS for static.planetminecraft.com
-The user globally disables all HTTPS traffic from planetminecraft.com

This is, of course, a security issue and should not be asked to move in the Ticket System that PlanetMinecraft has. An exploitable glitch in PlanetMinecraft should not be treated by how many upvotes it gets.
Posted by Devee's Avatar
Devee
Level 48 : Master Pokemon
14

Create an account or sign in to comment.

6

Willsr71
02/24/2016 9:25 am
Level 53 : Grandmaster Programmer
Willsr71's Avatar
This is because they ether do not have ssl support on their servers or they have incorrectly configured cloudflare. The most likely cause of this is they have instructed everything to go through only port 80, while ssl uses port 443. Edit: if they have cloudflare set up correctly this should not be an issue. I know because thats the configuration I have for my site
1
SkinHugger
02/23/2016 4:40 pm
Level 36 : Artisan Pixel Painter
SkinHugger's Avatar
you sure you don't have ad-block enabled?

i had that problem then i disabled ad-block.
1
Devee
02/24/2016 7:19 am
Level 48 : Master Pokemon
Devee's Avatar
I do not have adblock installed. I only have HTTPS Everywhere installed.
1
NewSuperMario
02/24/2016 9:00 am
Level 25 : Expert Dragonborn
NewSuperMario's Avatar
It's obvious that it's not Adblock, since the https link doesn't work for me either and I don't have Adblock. Changing the link to http makes the pic load perfectly
1
Latiodile
02/23/2016 12:37 pm
Level 16 : Journeyman Dragon
Latiodile's Avatar
There must be a reson why there isnt even a https://planetminecraft.com/

but the staff will tell you to submit a ticket... if security was a main concern (afaik) the forum login issue would have been fixed too, a long time ago
1
anonpmc1665509
02/23/2016 12:00 pm
Level 14 : Journeyman Miner
anonpmc1665509's Avatar
[deleted]
1
Planet Minecraft

Website

© 2010 - 2024
www.planetminecraft.com

Welcome