Unconfigured Ad Widget

Collapse

Click CalGuns Home Page Tab Unlocks The Security Lock, Bug?

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • tony270
    Veteran Member
    • Aug 2010
    • 3345

    Click CalGuns Home Page Tab Unlocks The Security Lock, Bug?

    Why does the security lock (orange) change to unsecured when I navigate using the Home Page (red) tab? It stays secured when navigating through the site using the circled green tabs, or the Android back arrow, but not the Home Page tab. I'm not using tapatalk, I click on the three dots and changed the view to desktop.

    Last edited by tony270; 02-25-2021, 5:50 PM.
  • #2
    nine mil thrill
    Senior Member
    • Sep 2010
    • 1050

    it is doing the same for me
    sigpic

    Comment

    • #3
      the86d
      Calguns Addict
      • Jul 2011
      • 9587

      Device? Browser?

      Comment

      • #4
        HecklerNKoch
        Member
        • Jan 2016
        • 428

        Originally posted by tony270
        Why does the security lock (orange) change to unsecured when I navigate using the Home Page (red) tab? It stays secured when navigating through the site using the circled green tabs, or the Android back arrow, but not the Home Page tab. I'm not using tapatalk, I click on the three dots and changed the view to desktop.



        It may be the case that you are using an (Samsung) Android with a Chromium-based browser requesting sites in Desktop mode through the App.


        Answer: Human error.


        When you click the home button, in particular, the browser accepts certificates from a large number of CAs. You land on the site's login page and momentarily are being 'redirected' because not all elements where being pulled as HTTPS, there is briefly mixed content, (as your origin was not https to begin with) and so there is (momentarily) mixed content of elements being pulled until fully redirected and until fully redirected there is an 'somewhat' invalid certification in transit.

        The wildcard is replaced and your browser has made the key exchange and ultimately the CommonName in the certificate matches the https domain in the URL.

        Observe this:


        In contract to this:
        Last edited by HecklerNKoch; 02-18-2021, 11:56 PM. Reason: Added "Samsung"

        Comment

        • #5
          the86d
          Calguns Addict
          • Jul 2011
          • 9587

          Comment

          • #6
            tony270
            Veteran Member
            • Aug 2010
            • 3345

            Originally posted by HecklerNKoch
            It may be the case that you are using an (Samsung) Android with a Chromium-based browser requesting sites in Desktop mode through the App.


            Answer: Human error.


            When you click the home button, in particular, the browser accepts certificates from a large number of CAs. You land on the site's login page and momentarily are being 'redirected' because not all elements where being pulled as HTTPS, there is briefly mixed content, (as your origin was not https to begin with) and so there is (momentarily) mixed content of elements being pulled until fully redirected and until fully redirected there is an 'somewhat' invalid certification in transit.

            The wildcard is replaced and your browser has made the key exchange and ultimately the CommonName in the certificate matches the https domain in the URL.

            Observe this:


            In contract to this:
            WoW, that was extremely helpful, explanation that a 5 grader could understand, thanks.

            Comment

            • #7
              tony270
              Veteran Member
              • Aug 2010
              • 3345

              Originally posted by the86d
              LOL. I'll just navigate around the Home Page tab...

              Comment

              • #8
                the86d
                Calguns Addict
                • Jul 2011
                • 9587

                Originally posted by tony270
                LOL. I'll just navigate around the Home Page tab...

                Comment

                Working...
                UA-8071174-1