Slightly different procedure I found today, looking for internet radio streams - of all things - and decided to try it on??on a lark. It seems to work. Now, whether it will remain so has yet to be seen. This had to do with secure connections to internet radio streams, but it seems to fit in with any similar web address (http:// instead of https://)
Open Chrome (or other chromium web browsers), go to the website and then click on the padlock icon to the left of the URL box and then from the drop down menu select the 'Site Settings' option, you can then scroll down to the 'Insecure content' option at the bottom of the page and select 'Allow', this will create an exception for the website and allow you to continue using the player as before.
Oh, I was saying that I
always get the warning pages with the option to bypass. Never had
any problems.
Firefox was actually originally called Phoenix, then Firebird
before finally settling with Firefox.
gives
the backstory. Ah, the good old days of the browser wars...
Mike
On 9/21/23 20:38, SlickRCBD wrote:
I'm
sorry, I thought you were asking about Chrome, not Firefox.
I also don't recall it being called Firebird, I do recall Mozilla
being the predecessor to Firefox however.
However, there is a similar setting you will want to enable in
Firefox.
Goto Settings->Privacy & Security.
Near the bottom of the page is "HTTPS-Only Mode"
Select one of the bottom two options such as "Don't enable
HTTPS-Only Mode"
Also I see one other setting different from the default, in
about:config I have "Security.disable_button.openCertManager set
to false, so maybe that needs to be set in order to enable it to
accept the certificate temporarily.
On 9/21/2023 8:00 PM, grenouille7777 wrote:
Interesting. I've never had to do any of
that, but then I'm still using the same profile from when it was
still called Firebird (v. 0.6). And that was imported from
Netscape 4.8.
Now running Firefox 117.0.1 (Linux x86_64) archlinux-1.0
Mike
On 9/21/23 16:51, SlickRCBD wrote:
I am using "Version 117.0.5938.92
(Official Build) (64-bit)" on Windows 10.
I have a suspicion on what might help. Try going to
settings->Privacy and Security.
First ensure that "Standard Protection" rather than "Enhanced
Protection" is selected.
(OPTIONAL) You might also want to uncheck "Help improve
security on the web for everyone" as if you read the fine
print, it's giving Google permission to monitor and track you
through the web.
Scroll down to the "Advanced" and turn off "Always use secure
connections".
I believe that might allow you onto the site.
--
The
surest sign that intelligent life exists elsewhere in the
universe is
that it has never tried to contact us.
I'm sorry, I thought you were asking about Chrome, not Firefox. I also don't recall it being called Firebird, I do recall Mozilla being the predecessor to Firefox however.
However, there is a similar setting you will want to enable in Firefox. Goto Settings->Privacy & Security. Near the bottom of the page is "HTTPS-Only Mode" Select one of the bottom two options such as "Don't enable HTTPS-Only Mode"
Also I see one other setting different from the default, in about:config I have "Security.disable_button.openCertManager set to false, so maybe that needs to be set in order to enable it to accept the certificate temporarily.
Interesting. I've never had to do any of that, but then I'm still using the same profile from when it was still called Firebird (v. 0.6). And that was imported from Netscape 4.8. Now running Firefox 117.0.1 (Linux x86_64) archlinux-1.0 Mike On 9/21/23 16:51, SlickRCBD wrote:
I am using "Version 117.0.5938.92 (Official Build) (64-bit)" on Windows 10.
I have a suspicion on what might help. Try going to settings->Privacy and Security. First ensure that "Standard Protection" rather than "Enhanced Protection" is selected. (OPTIONAL) You might also want to uncheck "Help improve security on the web for everyone" as if you read the fine print, it's giving Google permission to monitor and track you through the web.
Scroll down to the "Advanced" and turn off "Always use secure connections". I believe that might allow you onto the site.
Interesting. I've never
had to do any of that, but then I'm still using the same profile
from when it was still called Firebird (v. 0.6). And that was
imported from Netscape 4.8.
Now running Firefox 117.0.1 (Linux x86_64) archlinux-1.0
Mike
On 9/21/23 16:51, SlickRCBD wrote:
I am
using "Version 117.0.5938.92 (Official Build) (64-bit)" on Windows
10.
I have a suspicion on what might help. Try going to
settings->Privacy and Security.
First ensure that "Standard Protection" rather than "Enhanced
Protection" is selected.
(OPTIONAL) You might also want to uncheck "Help improve security
on the web for everyone" as if you read the fine print, it's
giving Google permission to monitor and track you through the web.
Scroll down to the "Advanced" and turn off "Always use secure
connections".
I believe that might allow you onto the site.
--
The
surest sign that intelligent life exists elsewhere in the
universe is
that it has never tried to contact us.
I am using "Version 117.0.5938.92 (Official Build) (64-bit)" on Windows 10.
I have a suspicion on what might help. Try going to settings->Privacy and Security. First ensure that "Standard Protection" rather than "Enhanced Protection" is selected. (OPTIONAL) You might also want to uncheck "Help improve security on the web for everyone" as if you read the fine print, it's giving Google permission to monitor and track you through the web.
Scroll down to the "Advanced" and turn off "Always use secure connections". I believe that might allow you onto the site.
I don't know what's going on here, because even with safe browsing turned off (not even "normal security" set on Chrome, I can't connect image.png It fails the HSTS check and stops. Firefox is the same. What version of Chrome are you running? DaZZa On Fri, 22 Sept 2023 at 00:36, SlickRCBD <slickrcbdalerts@... <mailto:slickrcbdalerts@...>> wrote: Only if you have the highest security level in Chrome. Chrome for me is giving me and "advanced" button with "proceed to www.fanficauthors.net <> (unsafe) at the bottom. Chrome allows Fanficauthors.net Chrome for me is giving me and "advanced" button with "proceed to www.fanficauthors.net <> (unsafe) at the bottom. Firefox lets you click the "advanced" button, then "accept the risk and continue" and access the site.
HSTS forces your webbrowser to only use https and ignore the fallback option for http. therefore you don't get the option to ignore the certificate in the message.
Am Do., 21. Sept. 2023 um 22:46?Uhr schrieb DaZZa <dazzagibbs@...>:
Only if you have the highest security
level in Chrome.
Chrome for me is giving me and "advanced" button with "proceed to
(unsafe) at the bottom.?
Chrome for me is giving me and "advanced" button with "proceed to
(unsafe) at the bottom.
Firefox lets you click the "advanced" button, then "accept the
risk and continue" and access the site.
On 9/20/2023 5:32 PM, DaZZa wrote:
Not true. You might get the option to go into the advanced menu, but
from there you will get simply a message like this
" normally uses encryption to protect your
information. When Chrome tried to connect to
this time, the website sent back unusual and incorrect credentials.
This may happen when an attacker is trying to pretend to be
, or a Wi-Fi sign-in screen has interrupted the
connection. Your information is still secure because Chrome stopped
the connection before any data was exchanged.
You cannot visit right now because the website
uses HSTS. Network errors and attacks are usually temporary, so this
page will probably work later."
Edge and Chrome are both Chromium based browsers now, and will give
the same error. Firefox/Waterfox will give something different.
There may be a browser out there which will allow you to ignore the
HSTS requirement - I haven't tested all of them - but the three most
common ones won't.
DaZZa
On Wed, 20 Sept 2023 at 23:59, Alex Cherry <raginginsincerity@...> wrote:
You should be able to in Chrome click "Show Advanced" and then it will reveal a link at the bottom that says "Proceed to anyway" or similar. That's latest version of Chrome, I just tested it. Pretty sure any webkit browser is going to be the same, which includes Edge as well.
--
惫别驳·别·迟补谤·颈·补苍: Ancient tribal slang for the village idiot who can't hunt, fish or ride
Only if you have the highest security
level in Chrome.
Chrome for me is giving me and "advanced" button with "proceed to
(unsafe) at the bottom.?
Chrome for me is giving me and "advanced" button with "proceed to
(unsafe) at the bottom.
Firefox lets you click the "advanced" button, then "accept the
risk and continue" and access the site.
On 9/20/2023 5:32 PM, DaZZa wrote:
Not true. You might get the option to go into the advanced menu, but
from there you will get simply a message like this
" normally uses encryption to protect your
information. When Chrome tried to connect to
this time, the website sent back unusual and incorrect credentials.
This may happen when an attacker is trying to pretend to be
, or a Wi-Fi sign-in screen has interrupted the
connection. Your information is still secure because Chrome stopped
the connection before any data was exchanged.
You cannot visit right now because the website
uses HSTS. Network errors and attacks are usually temporary, so this
page will probably work later."
Edge and Chrome are both Chromium based browsers now, and will give
the same error. Firefox/Waterfox will give something different.
There may be a browser out there which will allow you to ignore the
HSTS requirement - I haven't tested all of them - but the three most
common ones won't.
DaZZa
On Wed, 20 Sept 2023 at 23:59, Alex Cherry <raginginsincerity@...> wrote:
You should be able to in Chrome click "Show Advanced" and then it will reveal a link at the bottom that says "Proceed to anyway" or similar. That's latest version of Chrome, I just tested it. Pretty sure any webkit browser is going to be the same, which includes Edge as well.
--
惫别驳·别·迟补谤·颈·补苍: Ancient tribal slang for the village idiot who can't hunt, fish or ride
Only if you have the highest security
level in Chrome.
Chrome for me is giving me and "advanced" button with "proceed to
(unsafe) at the bottom.?
Chrome for me is giving me and "advanced" button with "proceed to
(unsafe) at the bottom.
Firefox lets you click the "advanced" button, then "accept the
risk and continue" and access the site.
On 9/20/2023 5:32 PM, DaZZa wrote:
Not true. You might get the option to go into the advanced menu, but
from there you will get simply a message like this
" normally uses encryption to protect your
information. When Chrome tried to connect to
this time, the website sent back unusual and incorrect credentials.
This may happen when an attacker is trying to pretend to be
, or a Wi-Fi sign-in screen has interrupted the
connection. Your information is still secure because Chrome stopped
the connection before any data was exchanged.
You cannot visit right now because the website
uses HSTS. Network errors and attacks are usually temporary, so this
page will probably work later."
Edge and Chrome are both Chromium based browsers now, and will give
the same error. Firefox/Waterfox will give something different.
There may be a browser out there which will allow you to ignore the
HSTS requirement - I haven't tested all of them - but the three most
common ones won't.
DaZZa
On Wed, 20 Sept 2023 at 23:59, Alex Cherry <raginginsincerity@...> wrote:
You should be able to in Chrome click "Show Advanced" and then it will reveal a link at the bottom that says "Proceed to anyway" or similar. That's latest version of Chrome, I just tested it. Pretty sure any webkit browser is going to be the same, which includes Edge as well.
--
惫别驳·别·迟补谤·颈·补苍: Ancient tribal slang for the village idiot who can't hunt, fish or ride
Only if you have the highest security
level in Chrome.
Chrome for me is giving me and "advanced" button with "proceed to
(unsafe) at the bottom.?
Chrome for me is giving me and "advanced" button with "proceed to
(unsafe) at the bottom.
Firefox lets you click the "advanced" button, then "accept the
risk and continue" and access the site.
Not true. You might get the option to go into the advanced menu, but
from there you will get simply a message like this
" normally uses encryption to protect your
information. When Chrome tried to connect to
this time, the website sent back unusual and incorrect credentials.
This may happen when an attacker is trying to pretend to be
, or a Wi-Fi sign-in screen has interrupted the
connection. Your information is still secure because Chrome stopped
the connection before any data was exchanged.
You cannot visit right now because the website
uses HSTS. Network errors and attacks are usually temporary, so this
page will probably work later."
Edge and Chrome are both Chromium based browsers now, and will give
the same error. Firefox/Waterfox will give something different.
There may be a browser out there which will allow you to ignore the
HSTS requirement - I haven't tested all of them - but the three most
common ones won't.
DaZZa
On Wed, 20 Sept 2023 at 23:59, Alex Cherry <raginginsincerity@...> wrote:
You should be able to in Chrome click "Show Advanced" and then it will reveal a link at the bottom that says "Proceed to fanficauthors.net anyway" or similar. That's latest version of Chrome, I just tested it. Pretty sure any webkit browser is going to be the same, which includes Edge as well.
Granted, I have not tried today, but my bookmarks still take me to the site. Still, contacting him with that free offer is a fine step for someone to take.
Has anyone messaged Tim Joy (Jeconais) about switching the site(s) to Let’s Encrypt? The HTTPS certificates they give you are free (rather than $25 or more for a basic site certificate), but they only last six months and need some server-side setup to handle the automatic renewals. For basic HTTPS service, once it’s set up, it’s free and you don’t have to worry about renewals every year or two.
I would, but I lost his contact info.
On Wed, Sep 20, 2023 at 4:37 PM SlickRCBD <slickrcbdalerts@...> wrote:
On 9/20/2023 5:17 AM, DeliaDee via groups.io wrote:
I use Safari which will connect if I force it to (it argues with me but I am adamant). The only problem - that I can see - is that the certificate is expired. I'm pretty ignorant about these things. Is it really that much of a risk if its a website that has been visited many many many times before the certificate expired? _._,_._,_
This is why I strongly disagree with the "https for everything" switch. It is a risk for entering in your password, or doing any type of e-commerce.
For just reading a fanfic, or anything where you wouldn't care if the information was sent in clear text and intercepted/observed by a 3rd party, there is no risk at all. Up until around 5 years ago with the switch to HTTPS everywhere, Fanficauthors.net used HTTP and sent the fanfics in clear text, where no certificate was needed.
Now when you log in, it should be in HTTPS, and with an expired certificate there is a risk that somebody has hacked the site and is monitoring what you are doing so they can intercept your password in the hopes that you use the same username and password on other sites with more valuable stuff, such as being able to log into Amazon.com or Ebay and purchase whatever they want on your credit or debit card.
However, if there is no logon required, and you aren't entering or accessing any non-public information, there is no risk with certificates, and this illustrates why they should not have abolished HTTP.
On Thu, 21 Sept 2023 at 08:46, Z C <Z.C.no.spam@...> wrote:
Has anyone messaged Tim Joy (Jeconais) about switching the site(s) to Let’s Encrypt? The HTTPS certificates they give you are free (rather than $25 or more for a basic site certificate), but they only last six months and need some server-side setup to handle the automatic renewals. For basic HTTPS service, once it’s set up, it’s free and you don’t have to worry about renewals every year or two.
I would, but I lost his contact info.
On Wed, Sep 20, 2023 at 4:37 PM SlickRCBD <slickrcbdalerts@...> wrote:
On 9/20/2023 5:17 AM, DeliaDee via groups.io wrote:
I use Safari which will connect if I force it to (it argues with me but I am adamant). The only problem - that I can see - is that the certificate is expired. I'm pretty ignorant about these things. Is it really that much of a risk if its a website that has been visited many many many times before the certificate expired?
-- 惫别驳·别·迟补谤·颈·补苍: Ancient tribal slang for the village idiot who can't hunt, fish or ride
Has anyone messaged Tim Joy (Jeconais) about switching the site(s) to Let’s Encrypt? The HTTPS certificates they give you are free (rather than $25 or more for a basic site certificate), but they only last six months and need some server-side setup to handle the automatic renewals. For basic HTTPS service, once it’s set up, it’s free and you don’t have to worry about renewals every year or two.
On 9/20/2023 5:17 AM, DeliaDee via wrote:
> I use Safari which will connect if I force it to (it argues with me but
> I am adamant).? The only problem - that I can see - is that the
> certificate is expired.? I'm pretty ignorant about these things.? Is it
> really that much of a risk if its a website that has been visited many
> many many times before the certificate expired?
> _._,_._,_
This is why I strongly disagree with the "https for everything" switch.
It is a risk for entering in your password, or doing any type of e-commerce.
For just reading a fanfic, or anything where you wouldn't care if the
information was sent in clear text and intercepted/observed by a 3rd
party, there is no risk at all.
Up until around 5 years ago with the switch to HTTPS everywhere,
Fanficauthors.net used HTTP and sent the fanfics in clear text, where no
certificate was needed.
Now when you log in, it should be in HTTPS, and with an expired
certificate there is a risk that somebody has hacked the site and is
monitoring what you are doing so they can intercept your password in the
hopes that you use the same username and password on other sites with
more valuable stuff, such as being able to log into Amazon.com or Ebay
and purchase whatever they want on your credit or debit card.
However, if there is no logon required, and you aren't entering or
accessing any non-public information, there is no risk with
certificates, and this illustrates why they should not have abolished HTTP.
Not true. You might get the option to go into the advanced menu, but from there you will get simply a message like this
"www.fanficauthors.net normally uses encryption to protect your information. When Chrome tried to connect to www.fanficauthors.net this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be www.fanficauthors.net, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Chrome stopped the connection before any data was exchanged.
You cannot visit www.fanficauthors.net right now because the website uses HSTS. Network errors and attacks are usually temporary, so this page will probably work later."
Edge and Chrome are both Chromium based browsers now, and will give the same error. Firefox/Waterfox will give something different.
There may be a browser out there which will allow you to ignore the HSTS requirement - I haven't tested all of them - but the three most common ones won't.
On Wed, 20 Sept 2023 at 23:59, Alex Cherry <raginginsincerity@...> wrote:
You should be able to in Chrome click "Show Advanced" and then it will reveal a link at the bottom that says "Proceed to fanficauthors.net anyway" or similar. That's latest version of Chrome, I just tested it. Pretty sure any webkit browser is going to be the same, which includes Edge as well.
-- 惫别驳·别·迟补谤·颈·补苍: Ancient tribal slang for the village idiot who can't hunt, fish or ride
Safari is obviously not following current security practises if it actually allows you to get content from that site (not just a warning about the expired certificate).
The code on the site enforces HSTS - which stands for "HTTP Strict Transport Security" - if the HTPS browser transaction fails for any reason, the browser is supposed to refuse to connect. If it's allowing conenction to the actual site (not just giving a warning), then it's breaking protocol.
And yeah, an expired certificate can be evidence of many things - a MiTM (Man in The Middle) compromise being one of them. Allowing this override could allow a site hack to direct you to a site which mimics the original - but which delivers a malicious payload instead. That's part of the reason HTTPS everywhere was brought into being.
DaZZa
On Wed, 20 Sept 2023 at 20:17, DeliaDee via groups.io <terrapin19148@...> wrote:
I use Safari which will connect if I force it to (it argues with me but I am adamant). The only problem - that I can see - is that the certificate is expired. I'm pretty ignorant about these things. Is it really that much of a risk if its a website that has been visited many many many times before the certificate expired?
-- 惫别驳·别·迟补谤·颈·补苍: Ancient tribal slang for the village idiot who can't hunt, fish or ride
On 9/20/2023 5:17 AM, DeliaDee via groups.io wrote:
I use Safari which will connect if I force it to (it argues with me but I am adamant). ?The only problem - that I can see - is that the certificate is expired. ?I'm pretty ignorant about these things. ?Is it really that much of a risk if its a website that has been visited many many many times before the certificate expired? _._,_._,_
This is why I strongly disagree with the "https for everything" switch. It is a risk for entering in your password, or doing any type of e-commerce.
For just reading a fanfic, or anything where you wouldn't care if the information was sent in clear text and intercepted/observed by a 3rd party, there is no risk at all. Up until around 5 years ago with the switch to HTTPS everywhere, Fanficauthors.net used HTTP and sent the fanfics in clear text, where no certificate was needed.
Now when you log in, it should be in HTTPS, and with an expired certificate there is a risk that somebody has hacked the site and is monitoring what you are doing so they can intercept your password in the hopes that you use the same username and password on other sites with more valuable stuff, such as being able to log into Amazon.com or Ebay and purchase whatever they want on your credit or debit card.
However, if there is no logon required, and you aren't entering or accessing any non-public information, there is no risk with certificates, and this illustrates why they should not have abolished HTTP.
You should be able to in Chrome click "Show Advanced" and then it will reveal a link at the bottom that says "Proceed to anyway" or similar.? That's latest version of Chrome, I just tested it.? Pretty sure any webkit browser is going to be the same, which includes Edge as well.
I use Safari which will connect if I force it to (it argues with me but I am adamant). ?The only problem - that I can see - is that the certificate is expired. ?I'm pretty ignorant about these things. ?Is it really that much of a risk if its a website that has been visited many many many times before the certificate expired?
Unfortunately, Jeconais has become somewhat disenchanted with fan fiction, and now doesn't put a lot of effort into maintaining his web site - and it's currently unusable for anyone with anything approaching a recent browser as the SSL certificate is expired, and the settings forcing https connectivity can;t be complied with - so most browsers will refuse to connect to it
is the base URL - but connecting at the monet just isn't happening.
But then, Jeconais’ stories are all amazing anyway.
?
Derek
?
?
Sent from for Windows
?
From: Icemanau Sent: September 19, 2023 4:23 PM To: [email protected] Subject: Re: [Snorkack] Recommendations
?
Sounds like 'Hogwarts Dawn'. Don't have a link handy at the moment but it can be found easily.
?
==========
"My doctor says that I have a malformed public-duty gland and a natural deficiency in moral fibre, and that I am therefore excused from saving Universes." ~Douglas Adams
From: Icemanau Sent: September 19, 2023 4:23 PM To: [email protected] Subject: Re: [Snorkack] Recommendations
?
Sounds like 'Hogwarts Dawn'. Don't have a link handy at the moment but it can be found easily.
?
==========
"My doctor says that I have a malformed public-duty gland and a natural deficiency in moral fibre, and that I am therefore excused from saving Universes." ~Douglas Adams
Sounds like 'Hogwarts Dawn'. Don't have a link handy at the moment but it can be found easily.
==========
"My doctor says that I have a malformed public-duty gland and a natural deficiency in moral fibre, and that I am therefore excused from saving Universes." ~Douglas Adams