Aurora and https://www.nytimes.com

https://www.nytimes.com fails to render correctly in aurora, in the 
latest Chrome, and the latest IE10.

firefox and chrome are silent about the problem, which I believe is 
mixed content.  the firefox error log contains multiple reports like
Error: Blocked loading mixed active content 
"http://css.nyt.com/css/0.1/screen/build/homepage/styles.css"
Source File: https://www.nytimes.com/
Line: 0

IE10 displays a warning that insecure content has been blocked and 
offers to accept all content.  If clicked, the page re-renders 
correctly.  Chrome is silent.

I foresee trouble is this problem is common, particularly when no 
warning is given.  But I don't see the average user understanding the IE 
warning either.  Sigh.
0
Millwood
5/22/2013 1:13:33 PM
mozilla.support.firefox 24319 articles. 10 followers. Post Follow

11 Replies
26306 Views

Similar Articles

[PageSpeed] 51

On 05/22/2013 09:13 AM, Millwood wrote:
> https://www.nytimes.com fails to render correctly in aurora, in the
> latest Chrome, and the latest IE10.
>
> firefox and chrome are silent about the problem, which I believe is
> mixed content.  the firefox error log contains multiple reports like
> Error: Blocked loading mixed active content
> "http://css.nyt.com/css/0.1/screen/build/homepage/styles.css"
> Source File: https://www.nytimes.com/
> Line: 0
>
> IE10 displays a warning that insecure content has been blocked and
> offers to accept all content.  If clicked, the page re-renders
> correctly.  Chrome is silent.
>
> I foresee trouble is this problem is common, particularly when no
> warning is given.  But I don't see the average user understanding the IE
> warning either.  Sigh.
>

In Aurora what happens if you click on the shield icon, to the left of 
the globe icon, and select "Disable Protection on This Page" from the 
drop down?

<https://blog.mozilla.org/security/2013/05/16/mixed-content-blocking-in-firefox-aurora/>

-- 
openSUSE 12.3 (64-bit) KDE 4.10.2
Thunderbird Daily 24.0a1
I abhor GG.
0
WaltS
5/22/2013 1:22:01 PM
On 22.05.2013 15:13, Millwood wrote:
> https://www.nytimes.com fails to render correctly in aurora, in
> the latest Chrome, and the latest IE10.
>
> firefox and chrome are silent about the problem, which I believe
> is mixed content.  the firefox error log contains multiple
> reports like
> Error: Blocked loading mixed active content
> "http://css.nyt.com/css/0.1/screen/build/homepage/styles.css"
> Source File: https://www.nytimes.com/
> Line: 0
>
> IE10 displays a warning that insecure content has been blocked
> and offers to accept all content.  If clicked, the page
> re-renders correctly.  Chrome is silent.
>
> I foresee trouble is this problem is common, particularly when no
> warning is given.  But I don't see the average user understanding
> the IE warning either.  Sigh.

WFM: Ubuntu 10.04, Firefox 20. *But* 
<http://validator.w3.org/check?uri=https%3A%2F%2Fwww.nytimes.com&charset=%28detect+automatically%29&doctype=Inline&group=0> 
says: 389 Errors, 49 warning(s) - no comment. :-(
And it contains branches depending on the browser you come. Whats 
your browser's user string?

Christoph

-- 
email:
nurfuerspam -> gmx
de -> net
0
Christoph
5/22/2013 2:17:38 PM
On 05/22/2013 10:17 AM, Christoph Schmees wrote:
> On 22.05.2013 15:13, Millwood wrote:
>> https://www.nytimes.com fails to render correctly in aurora, in
>> the latest Chrome, and the latest IE10.
>>
>> firefox and chrome are silent about the problem, which I believe
>> is mixed content.  the firefox error log contains multiple
>> reports like
>> Error: Blocked loading mixed active content
>> "http://css.nyt.com/css/0.1/screen/build/homepage/styles.css"
>> Source File: https://www.nytimes.com/
>> Line: 0
>>
>> IE10 displays a warning that insecure content has been blocked
>> and offers to accept all content.  If clicked, the page
>> re-renders correctly.  Chrome is silent.
>>
>> I foresee trouble is this problem is common, particularly when no
>> warning is given.  But I don't see the average user understanding
>> the IE warning either.  Sigh.
>
> WFM: Ubuntu 10.04, Firefox 20. *But*
> <http://validator.w3.org/check?uri=https%3A%2F%2Fwww.nytimes.com&charset=%28detect+automatically%29&doctype=Inline&group=0>
> says: 389 Errors, 49 warning(s) - no comment. :-(
> And it contains branches depending on the browser you come. Whats
> your browser's user string?
>
> Christoph
>

Hi Christoph

Millwood is using a development build of Firefox called Aurora, 
currently version 23.0a2, with the new Mixed Content Blocking feature.

Allowing the mixed content should solve the problem.

The page looks exactly the same in my Firefox 20.0 which doesn't have 
Mixed Content Blocking, and Aurora 23.0a2 when I allow the mixed content.

Mozilla/5.0 (X11; Linux x86_64; rv:23.0) Gecko/20130522 Firefox/23.0

-- 
openSUSE 12.3 (64-bit) KDE 4.10.2
Thunderbird Release
I despise GG.
0
WaltS
5/22/2013 2:51:38 PM
On 05/22/2013 09:13 AM, Millwood wrote:
> https://www.nytimes.com fails to render correctly in aurora, in the
> latest Chrome, and the latest IE10.
>
> firefox and chrome are silent about the problem, which I believe is
> mixed content.  the firefox error log contains multiple reports like
> Error: Blocked loading mixed active content
> "http://css.nyt.com/css/0.1/screen/build/homepage/styles.css"
> Source File: https://www.nytimes.com/
> Line: 0
>
> IE10 displays a warning that insecure content has been blocked and
> offers to accept all content.  If clicked, the page re-renders
> correctly.  Chrome is silent.
>
> I foresee trouble is this problem is common, particularly when no
> warning is given.  But I don't see the average user understanding the IE
> warning either.  Sigh.
>

Known bug.

<https://bugzilla.mozilla.org/show_bug.cgi?id=862164>



-- 
openSUSE 12.3 (64-bit) KDE 4.10.2
Thunderbird Release
I despise GG.
0
WaltS
5/22/2013 3:19:49 PM
WaltS wrote:
> On 05/22/2013 09:13 AM, Millwood wrote:
>> https://www.nytimes.com fails to render correctly in aurora, in the
>> latest Chrome, and the latest IE10.
>>
>> firefox and chrome are silent about the problem, which I believe is
>> mixed content.  the firefox error log contains multiple reports like
>> Error: Blocked loading mixed active content
>> "http://css.nyt.com/css/0.1/screen/build/homepage/styles.css"
>> Source File: https://www.nytimes.com/
>> Line: 0
>>
>> IE10 displays a warning that insecure content has been blocked and
>> offers to accept all content.  If clicked, the page re-renders
>> correctly.  Chrome is silent.
>>
>> I foresee trouble is this problem is common, particularly when no
>> warning is given.  But I don't see the average user understanding the IE
>> warning either.  Sigh.
>>
>
> In Aurora what happens if you click on the shield icon, to the left of
> the globe icon, and select "Disable Protection on This Page" from the
> drop down?
>
> <https://blog.mozilla.org/security/2013/05/16/mixed-content-blocking-in-firefox-aurora/>
>
>
Wheels within wheels.

I have been running the Australis Redsigned Theme v 0.1.2 which I rather 
like.  But it breaks the shield mechanism - it doesn't appear.

The shield does allow the page to display.  As best I can tell, this 
setting is not remembered so you need to do it each time.  And there is 
no way my wife would ever figure out that she needed to click on the 
shield, or understand the choice if she did.  I consider her a fairly 
literate "normal" user of computers.

Thanks for educating me.
0
Millwood
5/22/2013 5:52:24 PM
Millwood wrote:
> https://www.nytimes.com fails to render correctly in aurora, in the
> latest Chrome, and the latest IE10.
>
> firefox and chrome are silent about the problem, which I believe is
> mixed content. the firefox error log contains multiple reports like
> Error: Blocked loading mixed active content
> "http://css.nyt.com/css/0.1/screen/build/homepage/styles.css"
> Source File: https://www.nytimes.com/
> Line: 0
>
> IE10 displays a warning that insecure content has been blocked and
> offers to accept all content. If clicked, the page re-renders correctly.
> Chrome is silent.
>
> I foresee trouble is this problem is common, particularly when no
> warning is given. But I don't see the average user understanding the IE
> warning either. Sigh.
Toast in Chrome Mac
Works Like Charm in Aurora
Toast in Maxthon
Works In Safari
Works In Opera and Opera next
Works In OmniWeb
Works In FireFox21.5 beta
Works Perfect in iCab
Apparently Maxthon is a Cross between Chrome and FireFox. Looks Like it 
hates Chromes version of Javascript or CSS.  I can't Vouch for IE I use 
a Mac It would surprise me If IE did work The still Flaunt Standards and 
their own way.


-- 
Phillip M. Jones, C.E.T.      "If it's Fixed, Don't Break it"
http://www.phillipmjones.net    mailto:pjonescet@comcast.net
0
PhillipJones
5/22/2013 10:43:45 PM
In message <v9SdnUJ9f-buRgHMnZ2dnUVZ_tOdnZ2d@mozilla.org>, WaltS 
<wls15202@REMOVEyahoo.com> writes:
[]
>Allowing the mixed content should solve the problem.
>
>The page looks exactly the same in my Firefox 20.0 which doesn't have 
>Mixed Content Blocking, and Aurora 23.0a2 when I allow the mixed 
>content.
[]
What is "mixed content" (and why might one want to block it 
specifically)?
-- 
J. P. Gilliver. UMRA: 1960/<1985 MB++G()AL-IS-Ch++(p)Ar@T+H+Sh0!:`)DNAf

"The people here are more educated and intelligent. Even stupid people in
Britain are smarter than Americans." Madonna, in RT 30 June-6July 2001 (page
32)
0
J
5/23/2013 6:05:11 AM
On 05/23/2013 02:05 AM, J. P. Gilliver (John) wrote:
> In message <v9SdnUJ9f-buRgHMnZ2dnUVZ_tOdnZ2d@mozilla.org>, WaltS
> <wls15202@REMOVEyahoo.com> writes:
> []
>> Allowing the mixed content should solve the problem.
>>
>> The page looks exactly the same in my Firefox 20.0 which doesn't have
>> Mixed Content Blocking, and Aurora 23.0a2 when I allow the mixed
>> content.
> []
> What is "mixed content" (and why might one want to block it
> specifically)?
>

That was explained in this link I provided in my first reply to Millwood.

<https://blog.mozilla.org/security/2013/05/16/mixed-content-blocking-in-firefox-aurora/>

"When an HTTPS page contains HTTP resources, the HTTP resources are 
called Mixed Content."

Read the whole post for a better understanding.

-- 
openSUSE 12.3 (64-bit) KDE 4.10.2
Thunderbird Release
I despise GG.
0
WaltS
5/23/2013 11:38:46 AM
WaltS wrote:
> On 05/23/2013 02:05 AM, J. P. Gilliver (John) wrote:
>> In message <v9SdnUJ9f-buRgHMnZ2dnUVZ_tOdnZ2d@mozilla.org>, WaltS
>> <wls15202@REMOVEyahoo.com> writes:
>> []
>>> Allowing the mixed content should solve the problem.
>>>
>>> The page looks exactly the same in my Firefox 20.0 which doesn't have
>>> Mixed Content Blocking, and Aurora 23.0a2 when I allow the mixed
>>> content.
>> []
>> What is "mixed content" (and why might one want to block it
>> specifically)?
>>
>
> That was explained in this link I provided in my first reply to Millwood.
>
> <https://blog.mozilla.org/security/2013/05/16/mixed-content-blocking-in-firefox-aurora/>
>
>
> "When an HTTPS page contains HTTP resources, the HTTP resources are
> called Mixed Content."
>
> Read the whole post for a better understanding.
>
IMHO, this is going to be incomprehensible for the average user.  As 
such, I urge firefox to take an "under the radar" approach.  Only block 
stuff blocked by both IE and Chrome, so any site firefox breaks is 
broken everywhere!  (https://www.nytimes.com is broken everywhere).
0
Millwood
5/23/2013 1:15:27 PM
On 05/23/2013 09:15 AM, Millwood wrote:
> WaltS wrote:
>> On 05/23/2013 02:05 AM, J. P. Gilliver (John) wrote:
>>> In message <v9SdnUJ9f-buRgHMnZ2dnUVZ_tOdnZ2d@mozilla.org>, WaltS
>>> <wls15202@REMOVEyahoo.com> writes:
>>> []
>>>> Allowing the mixed content should solve the problem.
>>>>
>>>> The page looks exactly the same in my Firefox 20.0 which doesn't have
>>>> Mixed Content Blocking, and Aurora 23.0a2 when I allow the mixed
>>>> content.
>>> []
>>> What is "mixed content" (and why might one want to block it
>>> specifically)?
>>>
>>
>> That was explained in this link I provided in my first reply to Millwood.
>>
>> <https://blog.mozilla.org/security/2013/05/16/mixed-content-blocking-in-firefox-aurora/>
>>
>>
>> "When an HTTPS page contains HTTP resources, the HTTP resources are
>> called Mixed Content."
>>
>> Read the whole post for a better understanding.
>>
> IMHO, this is going to be incomprehensible for the average user.  As
> such, I urge firefox to take an "under the radar" approach.  Only block
> stuff blocked by both IE and Chrome, so any site firefox breaks is
> broken everywhere!  (https://www.nytimes.com is broken everywhere).
>

IMHO, average (all) users should read release notes, review menus and 
preferences for changes with each update.

It is a known Firefox bug as I pointed out in another post in this thread.

The <http://www.nytimes.com/> version loads just fine.

My belief is that once a user disables protection on a mixed content 
page the user won't see the shield again, but I can not confirm that 
because I never run into any mixed content pages in my daily routine.

It will be a major PITA to have to activate the shield, and disable 
protection on every visit.

I will continue testing bookmarked sites that are not a part of my daily 
routine.

-- 
openSUSE 12.3 (64-bit) KDE 4.10.2
Thunderbird Daily 24.0a1
I abhor GG.
0
WaltS
5/23/2013 1:39:57 PM
In message <dpOdnWPH4dVdYgDMnZ2dnUVZ_t-dnZ2d@mozilla.org>, WaltS 
<wls15202@REMOVEyahoo.com> writes:
>On 05/23/2013 02:05 AM, J. P. Gilliver (John) wrote:
>> In message <v9SdnUJ9f-buRgHMnZ2dnUVZ_tOdnZ2d@mozilla.org>, WaltS
>> <wls15202@REMOVEyahoo.com> writes:
>> []
>>> Allowing the mixed content should solve the problem.
>>>
>>> The page looks exactly the same in my Firefox 20.0 which doesn't have
>>> Mixed Content Blocking, and Aurora 23.0a2 when I allow the mixed
>>> content.
>> []
>> What is "mixed content" (and why might one want to block it
>> specifically)?
>>
>
>That was explained in this link I provided in my first reply to Millwood.
>
><https://blog.mozilla.org/security/2013/05/16/mixed-content-blocking-in-
>firefox-aurora/>
>
>"When an HTTPS page contains HTTP resources, the HTTP resources are 
>called Mixed Content."
[]
Thanks. (I don't always follow posted links, especially to blogs.)

I think a better term would be mixed-security content (or even
Mixed-Security Content if we must), but I guess we're stuck with
"Mixed Content" now.
-- 
J. P. Gilliver. UMRA: 1960/<1985 MB++G()AL-IS-Ch++(p)Ar@T+H+Sh0!:`)DNAf

"Bother," said Pooh, as he fell off the bridge with his stick.
0
J
5/24/2013 5:57:42 AM
Reply:

Similar Artilces:

https://www.mydomain.com or https://mydomain.com
Hi I have to provide my hosting company with the address I want for SSL.  My two options are either "https://www.mydomain.com"  or "https://mydomain.com".   What is the difference in effect of one over the other ? Chris     No difference.  And if your host can't provide both (they should be able to) then have them alias the one you don't choose to the one you do in your DNS.  FWIW, most people will use the www host name automatically... JeffPlease: Don't forget to click "Mark as Answer" on the post tha...

Switch / Force to change my page's link from http://www.abc.com/a.aspx to https://www.abc.com/a.aspx
Hi, i just bough an SSL certificate from versign, installed it and checked it by manually replacing http to https in my site's link.. but i how can do it in asp.net that when ever sumone click on checkout button and the creditcard / transaction page appears which is let suppose   http://www.abc.com/pay.aspx, I want it to start with https:// how to do it? Thanks, Regards.X...

Firefox 3 RC1 has problems with NY Times website www.nytimes.com
Name: Leslie Email: lesliekliebatgmaildotcom Product: Firefox Release Candidate Summary: Firefox 3 RC1 has problems with NY Times website www.nytimes.com Comments: Double-clicking on the scroll bar when at the NY Times website http://www.nytimes.com brings up the information window, a script on the NY times website that is supposed to fire (only) when one double clicks on a word in the text and then brings up a window with an explanation of that word. This also happens in Safe Mode. This JavaScript should not fire when double clicking on the scroll bar! Happens on Vi...

https://www.facebook.com/dialog/oauth?client_id=205207189635985&scope=publish_actions%2Cemail%2Cuser_interests&redirect_uri=https%3A%2F%2Fapps.facebook.com%2Fsoldiersinc%2F%3FadCampaign%3D18050%26adPi
https://www.facebook.com/dialog/oauth?client_id=205207189635985&scope=publish_actions%2Cemail%2Cuser_interests&redirect_uri=https%3A%2F%2Fapps.facebook.com%2Fsoldiersinc%2F%3FadCampaign%3D18050%26adPixel%3Dsam%26sb_src%3Ddde03qeuo10fq%26tr_stat%3D1 -- Vink The public demands certainties; it must be told definitely and a bit raucously that this is true and that is false. But there are no certainties. -- H.L. Mencken, "Prejudice" ...

http://www.m-firefox.com/uk/
Name: Girindor Email: robindotstapleatgooglemaildotcom Product: Firefox Summary: http://www.m-firefox.com/uk/ - fake firefox site? Comments: Could someone look in to whether this is legal? Browser Details: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.9.0.1) Gecko/2008070208 Firefox/3.0.1 From URL: http://hendrix.mozilla.org/ ...

https://www.google.com/
does not show the "...news..." banner, but ID8 does! Rick Merrill wrote: > does not show the "...news..." banner, > > but ID8 does! What is "ID8" ? On 10/09/2013 10:34 AM, Philip Taylor wrote: > > > > Rick Merrill wrote: >> does not show the "...news..." banner, >> >> but ID8 does! > > What is "ID8" ? > Internet Destroyer 8 :) WaltS wrote: > On 10/09/2013 10:34 AM, Philip Taylor wrote: >> >> >> >> Rick Merrill wrote: >>...

https://www.gnx.com/
Just recently upgraded from Netware 5.1 and BM3.6 to Netware 6 sp2 (Tcp 6.05o) BM37 (Sp1 + bmmacssl1) Running with Craig's Rev 5 proxy.cfg. I'm having an issue with the following site; https://www.gnx.com/ . What I'm seeing is that the page gets stuck loading or if it does load all the way it loads very slowly through the proxy. I've accessed the page going through the server and using filters and it loads nice and fast. I was just hoping someone could confirm if they see the same thing. -- Michael J. Prentice, CNE, MCSE Works perfectly for me t...

https://www.alipay.com/
Name: liu Email: haozi409at163dotcom Product: Firefox Summary: https://www.alipay.com/ Comments: i can not login Browser Details: Mozilla/5.0 (Windows; U; Windows NT 5.1; zh-CN; rv:1.9) Gecko/2008051206 Firefox/3.0 From URL: http://hendrix.mozilla.org/ ...

firefox automatically adding www and Com
hi folks, my application is running on internal network and i have an issue with firefox 3. when users type website name to access web application it adds www.website.com to the url and generates network error. any ideas how to stop that happening?Jagjot SinghMCP, CCNA its fixed. http://www.latenightpc.com/blog/archives/2007/08/01/fixed-firefox-automatically-adds-www-and-com/ thanks for looking..Jagjot SinghMCP, CCNA...

http://www.google.com/firefox
I would like to change this so that it opens in the regular Google, the one I stay logged into. I want a button on the toolbar that opens Google, but I prefer to set my homepage to something else. I've searched files and the registry for a string I can change, but haven't found anything. In IE 6 I was able to drag all my toolbars into 1 leaving a couple of drop down menus. I'm having trouble duplicating that in Firefox. Also in IE I relied a lot on using Control+N to open a duplicate of the same page I was viewing, and I would like a way to do the same thing in Firefox. ...

https://www.youtube.com/watch
https://www.youtube.com/watch?v=Jzh-TKzXN2k&feature=youtu.be -- Vink home:http://ciudadpatricia.com User agent: Mozilla/5.0 (X11; Linux x86_64; rv:34.0) Gecko/20100101 Firefox/34.0 SeaMonkey/2.31b2 File: libflashplayer.so Path: /home/gerardjan/Downloads/seamonkey/plugins/libflashplayer.so Version: 11.2.202.425 State: Enabled Shockwave Flash 11.2 r202 ...

ref https://www. uchooserewards.com
Started with a problem with this site~ https://www.uchooserewards.com/mail/mailerview.php?xmailerid=33675-dca1c90a6a06afcf80fb1ebad18700e6-9899262 and it says You have requested a page that is only partially encrypted and does not prevent eavesdropping. Don't know what happened. Any tips? I have no idea what is wrong. Lee On 12/30/15, Lee <lbray5032@bellsouth.net> wrote: > Started with a problem with this site~ > https://www.uchooserewards.com/mail/mailerview.php?xmailerid=33675-dca1c90a6a06afcf80fb1ebad18700e6-9899262 > > and it says You have request...

Firefox & www.pogo.com
Name: Pauline Lanz Email: planz73athotmaildotcom Product: Firefox Summary: Firefox & www.pogo.com Comments: I downloaded the suggested upgrades this evening, and now none of the games I normally play on www.pogo.com will work. The game loads, and then Firefox shuts down. Please fix this!!! Thanks. Browser Details: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.1.4) Gecko/20070515 Firefox/2.0.0.4 ...

firefox shutdown when at www.java.com
so i download a few things and one day my limewire was not working so i tried to downloard the new java from www.java.com and whenever i would go there my firefox or internet explorer would just shut down. i think it could be a java problem but i dont know. also i cannot download on any other program such as D++. any help would be much appreciated. thanks the7thcity the7thcity@gmail.com wrote: > so i download a few things and one day my limewire was not working so i > tried to downloard the new java from www.java.com and whenever i would > go there my firefox or interne...

Web resources about - Aurora and https://www.nytimes.com - mozilla.support.firefox

The New York Times - Wikipedia, the free encyclopedia
The New York Times ( NYT ) is an American daily newspaper , founded and continuously published in New York City since September 18, 1851. It ...

Find Jobs: Search millions of jobs now - nytimes.com
If you're looking to post a job or search resumes, go to our employer website . (Thanks, but I'm looking for jobs ).

US Presidencies - 100 Days Blog - NYTimes.com
The New York Times’s 100 Days blog examines the first 100 days of past presidencies.

The New York Times Magazine - The 6th Floor Blog - NYTimes.com
The 6th Floor is the blog of The New York Times Magazine, where staff members — editors, designers, writers, photo editors and researchers — ...

Culture and the Arts - ArtsBeat Blog - NYTimes.com
The New York Times ArtsBeat blog explores the world of culture and the arts, including art, TV, books, movies, music and more. Also, reports ...

At War: Notes From the Front Lines - At War Blog - NYTimes.com
Notes from Afghanistan, Pakistan, Iraq and other areas of conflict in the post-9/11 era.

At War: Notes From the Front Lines - At War Blog - NYTimes.com
Notes from Afghanistan, Pakistan, Iraq and other areas of conflict in the post-9/11 era.

Baseball - Bats Blog - NYTimes.com
Baseball reporters and staff for The New York Times bring readers inside the game, with in-depth coverage of the Mets and Yankees.

U.S. - Bay Area Blog - NYTimes.com
The New York Times on the Web gathers and expands on the news of the day and matters of political and cultural resonance in the Bay Area, including ...

Technology - Bits Blog - NYTimes.com
The Bits blog from the New York Times reports on the technology industry, including start-ups, the Internet, enterprise and gadgets

Resources last updated: 1/23/2016 11:36:51 PM