unable to see board icons

[boolybooly (OP)]

All icons are being displayed as text with a default broken image link icon and have been for a week or so.

I tried DNS clear.

See screeny.

Is this server side?

The header link bar DDLs are behaving strangely as well. The subforum name e.g. "Changes / Help / Unread Posts" disappears when the DDL drops and the list is visible but hovering in limbo.

[Gyrfalcon]

Your browser may be forcing https for the website. The images... don't like that.

If you strip the s from the URL, your browser may (or may not) accept it and show the site as normal. I know in my case that my Chrome redirects me straight back to the https site. Funny enough, Incognito mode gets around that, but I'm not going to visit the aurora boards in incognito every time.

[Garfunkel]

My Chrome has no problem staying on the http version

[boolybooly (OP)]

My Chrome has no problem staying on the http version

Neither did mine until a few days ago It automatically reverts to HTTPS whatever I do. Is OK in Incognito though if I remove the s.


Query of aurora2.pentarch.org in Chrome Domain Security Policy page for HSTS/PKP returns a list of policies including ...

"dynamic_upgrade_mode: FORCE_HTTPS"

Delete function does not work, meaning it is preloaded.

So if admins want to do something about that it looks like you can remove a domain from the preloading list. Scroll down for the removal form link.

https://hstspreload.org/

[boolybooly (OP)]

wow it is working again... 

was that something you did Gyrfalcon ? (Or was it a delayed post-reboot result of pressing delete button?)

[Gyrfalcon]

Nothing I did, but I appreciated that you dug up a possible solution for Erik. No idea if he went ahead and implemented it, though.

[boolybooly (OP)]

If anyone is reading it seems to have broken again.

I have no idea why. Everything has stayed the same at my end.

[Zap0]

Are you accessing over http or https?

Last Thread about this

[boolybooly (OP)]

see below see above, Chrome Win10 switches randomly from being able to see images to not being able to see them without my doing anything, currently if I set the URL to http://~ it still loads https://

dont know why for sure but maybe its because Chrome responds to something serverside forcing HTTPS

on the HSTS preload checker site, pentarch.org currently gets a warning for unecessary HSTS header and two other error warnings which are related to not redirecting to HTTPS which is probably what we need but I wonder if the unecessary HSTS header might be triggering Chrome to go HTTPS, or something ?

I think there must have been a recent server adjustment of some kind which reverted it to how it was before whatever tweak made it work again, I havent done anything, am hoping it can be tweaked back

My Chrome has no problem staying on the http version

Neither did mine until a few days ago It automatically reverts to HTTPS whatever I do. Is OK in Incognito though if I remove the s.


Query of aurora2.pentarch.org in Chrome Domain Security Policy page for HSTS/PKP returns a list of policies including ...

"dynamic_upgrade_mode: FORCE_HTTPS"

Delete function does not work, meaning it is preloaded.

So if admins want to do something about that it looks like you can remove a domain from the preloading list. Scroll down for the removal form link.

https://hstspreload.org/

[boolybooly (OP)]

hold your horses I seem to have just fixed it my end using a tip from stack overflow

Type in: chrome://net-internals/#hsts in address bar of chrome. At the bottom place the domain to delete from HSTS.

https://stackoverflow.com/questions/73875589/disable-website-redirection-to-https-on-chrome#:~:text=Type%20in%3A%20chrome%3A%2F%2Fnet,domain%20to%20delete%20from%20HSTS.&text=Save%20this%20answer.,-Show%20activity%20on

the domain name is "pentarch.org"

I just entered that in the bottom field, exited Chrome via the three dots top right and restarted Chrome and bingo it worked!

PS I think what happened is I used an old bookmark with https in the URL and it rejigged Chrome back to https and borked pentarch.org, so now I am checking and editing my bookmarks to use http only for pentarch.org