The Garden (1663) comic doesn't work on HTTPS

Need the mods or admins to do something for you? Post here. Read the "About" post first.

Moderators: Moderators General, Prelates, Magistrates

kimsey0
Posts: 1
Joined: Mon Apr 04, 2016 10:38 am UTC

The Garden (1663) comic doesn't work on HTTPS

Postby kimsey0 » Mon Apr 04, 2016 10:52 am UTC

The Garden comic includes a script over unencrypted HTTP (http://linden0.xkcd.com/linden.js). Browsers block this script when browsing XKCD over encrypted HTTPS, and thus, the comic isn't shown. This is a problem if, for example, you've bookmarked the HTTPS version of XKCD of if you're using the Electronic Frontier Foundation HTTPS Everywhere browser extension, which doesn't allow connecting to XKCD over HTTP. It could be fixed by adding a SSL certificate to linden0.xkcd.com and either always serving the script over HTTPS or using a protocol relative link on the comic page:

Code: Select all

<script src="://linden0.xkcd.com/linden.js" ...

DenverC0der9
Posts: 1
Joined: Wed Apr 06, 2016 6:15 pm UTC

Re: The Garden (1663) comic doesn't work on HTTPS

Postby DenverC0der9 » Wed Apr 06, 2016 6:21 pm UTC

Under HTTPS everywhere, now the comic has transitioned from being blocked in firefox (due to some insecure content) to seemingly an infinite redirect loop, though it is hard for me to tell what is actually going on. In any case, only half the page loads, and the security icon quickly switches back and forth between the "everything is secure" icon and the "secure page with some insecure elements blocked" one.

UPDATE: It seems that the loop is caused by a change to how the site handles https requests. On this comic, it automatically switches to http when given an https request. The unfortunate thing is that HTTPS Everywhere tries to turn that back to https, and they keep fighting each other and never end up loading the page over either protocol. This is not a hard problem to fix (by just turning off the rule for xkcd.com in HTTPS Everywhere) but maybe it could be more elegantly fixed by getting a certificate for linden0.xkcd.com. :)

moloko
Posts: 4
Joined: Fri Dec 04, 2009 3:16 pm UTC

Re: The Garden (1663) comic doesn't work on HTTPS

Postby moloko » Wed Apr 13, 2016 4:44 pm UTC

+1 for this, I get same issue. easiest fix would be to change the URL http://linden0.xkcd.com/linden.js to a protocol-less one i.e. //linden0.xkcd.com/linden.js

Even after disabling https-everywhere and switching to the non-https version of xkcd.com I still get no further than the loading animation... in both Firefox and Safari (latest versions of both on OS X)

moloko
Posts: 4
Joined: Fri Dec 04, 2009 3:16 pm UTC

Re: The Garden (1663) comic doesn't work on HTTPS

Postby moloko » Wed Apr 13, 2016 4:47 pm UTC

Oh, nearly forgot...
Who were you, DenverCoder9?
What did you see?!

User avatar
davean
Site Ninja
Posts: 2498
Joined: Sat Apr 08, 2006 7:50 am UTC
Contact:

Re: The Garden (1663) comic doesn't work on HTTPS

Postby davean » Wed Apr 13, 2016 5:10 pm UTC

moloko wrote:+1 for this, I get same issue. easiest fix would be to change the URL http://linden0.xkcd.com/linden.js to a protocol-less one i.e. //linden0.xkcd.com/linden.js


Which would then not work at all when loaded via HTTPS.


Return to “Site/Forum issues”

Who is online

Users browsing this forum: No registered users and 5 guests