Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #234185

Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS connections

From Kenneth Parker <sea7kenp@gmail.com>
Newsgroups linux.debian.user
Subject Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS connections
Date 2021-04-15 07:20 +0200
Message-ID <C42A1-5LE-1@gated-at.bofh.it> (permalink)
References <C3Qpb-5U5-5@gated-at.bofh.it> <C3VId-1pV-1@gated-at.bofh.it> <C3ZLP-42v-1@gated-at.bofh.it> <C40ox-4eR-1@gated-at.bofh.it> <C41kB-4M2-1@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


[Multipart message — attachments visible in raw view] - view raw

On Wed, Apr 14, 2021, 11:57 PM Joe Pfeiffer <pfeiffer@cs.nmsu.edu> wrote:

> Kenneth Parker <sea7kenp@gmail.com> writes:
>
> > On Wed, Apr 14, 2021 at 10:16 PM Celejar <celejar@gmail.com> wrote:
> >
> >  On Wed, 14 Apr 2021 22:57:01 +0100
> >  piorunz <piorunz@gmx.com> wrote:
> >
> >  > On 14/04/2021 17:19, Celejar wrote:
> >  > > Hi,
> >  > >
> >  > > I recently switched to Firefox's native HTTPS-Only mode from the
> >  > > HTTPS Everywhere extension, and I've just made the nasty discovery
> that
> >  > > a bunch of links that had been returning 404, which I had been
> assuming
> >  > > were dead links, were actually perfectly valid pages, which Firefox
> had
> >  > > been "upgrading" to HTTPS, and then getting 404s from web servers
> that
> >  > > weren't offering them via HTTPS (but still apparently accepting
> >  > > connections via HTTPS). Clicking on the little lock icon and turning
> >  > > HTTPS-Only mode off for the website doesn't seem to have any effect
> -
> >  > > the only thing that lets me actually access these pages is turning
> off
> >  > > HTTPS-Only mode via the general Settings page (or about:config).
> >  > >
> >  > > When the website doesn't offer HTTPS at all, then Firefox offers to
> >  > > connect via HTTP, after a warning, and that's fine. But having pages
> >  > > become completely inaccessible is intolerable - I now have to check
> >  > > every 404 I get by turning off HTTPS-Only mode and seeing if the
> >  > > page is actually there. Am I missing something here, or is
> HTTPS-Only
> >  > > mode just badly broken?
> >  >
> >  > It certainly works fine for me. I use https only mode for many months
> >  > now. Can you bring an example of a page which returns good page on
> http,
> >  > but 404 error on https?
> >
> >  http://www.daat.ac.il/
> >  https://www.daat.ac.il/
> >
> >  Celejar
> >
> > Indeed:  A "Universe Site" that I host on Linode doesn't use https.  So,
> > https://eyeblinkuniverse.com   --   doesn't work:  "Problem loading
> page - Unable to connect"
> > http://eyeblinkuniverse.com    --  Works properly on my version of
> Firefox:  Firefox 78.9.0esr (64-bit) on Debian Bullseye.
> >
> > Does this mean that I can look forward to this failure, when the new
> Firefox comes out?  Why can't people still make simple, text-based web
> > pages that can be read to a Blind Person?  See, I don't do forms, data
> entry, or anything on my opening screens.  For that, it links to a
> > Blogspot, which uses some of Google's Bells and Whistles.
> >
> > In other words, is this the end of the "Simple Web"?
>
> https has nothing to do with "simple web" -- I term I don't remember
> having seen before, but I like.  All the TLS negotiation is handled by
> the web server and browser, and it's easy enough to set up with
> letsencryupt that there's really no excuse for not doing it (says the
> guy who hasn't gotten it set up yet for a shotgun club web site he
> manages...  really need to do that...).
>

I use lighttpd for eyeblinkuniverse.com, with nano as my editor. I don't
quite understand the Certificates required for https. I guess it is time
for some lessons.

Thanks!

Kenneth Parker

>

Back to linux.debian.user | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

Firefox HTTPS-only mode breaks sites that return 404 for HTTPS  connections Celejar <celejar@gmail.com> - 2021-04-14 18:20 +0200
  Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS connections riveravaldez <riveravaldezmail@gmail.com> - 2021-04-14 21:10 +0200
    Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS  connections Nito <nito@dismail.de> - 2021-04-15 02:40 +0200
    Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS  connections Celejar <celejar@gmail.com> - 2021-04-15 04:30 +0200
  Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS  connections piorunz <piorunz@gmx.com> - 2021-04-15 00:00 +0200
    Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS  connections Celejar <celejar@gmail.com> - 2021-04-15 04:20 +0200
      Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS connections Kenneth Parker <sea7kenp@gmail.com> - 2021-04-15 05:00 +0200
        Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS connections Joe Pfeiffer <pfeiffer@cs.nmsu.edu> - 2021-04-15 06:00 +0200
          Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS connections Kenneth Parker <sea7kenp@gmail.com> - 2021-04-15 07:20 +0200
            Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS  connections Dan Ritter <dsr@randomstring.org> - 2021-04-15 15:40 +0200
              Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS connections Kenneth Parker <sea7kenp@gmail.com> - 2021-04-15 16:40 +0200
              Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS  connections Richard Hector <richard@walnut.gen.nz> - 2021-04-16 03:10 +0200
                Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS  connections Tixy <tixy@yxit.co.uk> - 2021-04-16 10:40 +0200
              Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS  connections Jonathan Dowland <jon+debian-user@dow.land> - 2021-04-16 12:40 +0200
      Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS  connections piorunz <piorunz@gmx.com> - 2021-04-15 12:20 +0200
        Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS  connections Darac Marjal <mailinglist@darac.org.uk> - 2021-04-15 12:50 +0200
          Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS  connections Jonathan Dowland <jon+debian-user@dow.land> - 2021-04-15 14:40 +0200
            Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS  connections Jonathan Dowland <jon+debian-user@dow.land> - 2021-04-15 14:40 +0200
        Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS  connections Greg Wooledge <greg@wooledge.org> - 2021-04-15 13:30 +0200
        Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS  connections Celejar <celejar@gmail.com> - 2021-04-15 14:20 +0200
          Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS  connections Eduardo M KALINOWSKI <eduardo@kalinowski.com.br> - 2021-04-15 14:40 +0200
            Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS  connections Celejar <celejar@gmail.com> - 2021-04-15 17:20 +0200
          Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS  connections mett <mett@pmars.jp> - 2021-04-15 14:50 +0200
            Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS  connections piorunz <piorunz@gmx.com> - 2021-04-15 16:20 +0200
              Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS  connections Erwan David <erwan@rail.eu.org> - 2021-04-15 16:50 +0200
                Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS  connections piorunz <piorunz@gmx.com> - 2021-04-15 17:50 +0200
                Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS  connections Jonathan Dowland <jon+debian-user@dow.land> - 2021-04-16 13:30 +0200

csiph-web