4 ms·
As a result, in Chrome 46 (on desktop PCs, at least), there will be just three security states: a green padlock (full HTTPS), a red padlock (broken HTTPS), and
by AdmiralAsshat 11y ago
As a result, in Chrome 46 (on desktop PCs, at least), there will be just three security states: a green padlock (full HTTPS), a red padlock (broken HTTPS), and a grey piece of paper (HTTP).
I can't say I've ever seen the red padlock. Usually if the site had broken HTTPS, Chrome would refuse to load it at all.
- mortehu 11y ago> I can't say I've ever seen the red padlock I see one on news.ycombinator.com. Well, technically, a gray padlock with a red X on top of it.
- Aldo_MX 11y agoSounds like MITM to me
- lol768 11y agoIs there something that would intercept your connection to news.ycombinator.com and supply an invalid certificate? Chrome seems to be quite happy displaying a green padlock for me when I visit Hacker News.
- mortehu 11y agoNo, and if so, I would have received a much stronger warning. After some investigation, it turns out that my computer had an old Comodo certificate that lacked certificate transparency information.
- jessaustin 11y agoYou're probably on an employer-owned network? Their proxy is reading everything, and either they haven't set up a "fake" CA or you're using a BYOD that isn't configured with that fake CA.
- brixon 11y agoThat is true for me. Work does a man in the middle to inspect all traffic and I get the red X a lot. Don't expect any privacy at work.
- eloisant 11y agoChrome refuses to load it, but offers you a link to go to the site anyway and then you see the red padlock.
- dhimes 11y agoYes, this is how my staging server works. We use self-signed certs because it's just us and the hackers. This gets us the red X through the grey padlock (on linux chrome anyway)
- Laaw 11y agoI see it regularly when I'm doing dev work.