not a secure connection

daggnabbit, it's my machine

and I can't find how to allow it

--
Vasos Panagiotopoulos panix.com/~vjp2/vasos.htm
---{Nothing herein constitutes advice. Everything fully disclaimed.}---

On 6/20/23 15:54, this is what vjp2.at@at.BioStrategist.dot.dot.com wrote:
> not a secure connection
>
> daggnabbit, it's my machine
>
> and I can't find how to allow it
>
>
Works here, and it's https, not sure what 'secure connection' means to you.
--
Linux Mint 21.1 Cinnamon 5.6.8
Al

On Tue, 20 Jun 2023 19:54:59 -0000 (UTC),
vjp2.at@at.BioStrategist.dot.dot.com wrote:

>not a secure connection
>
>daggnabbit, it's my machine
>
>and I can't find how to allow it
I get "update to a modern browser"

114.0.2

KenW

vjp2.at@at.BioStrategist.dot.dot.com wrote:

> not a secure connection
>
> daggnabbit, it's my machine
>
> and I can't find how to allow it

fine here, have you restricted your TLS ciphers/protocols?

On Tue, 20 Jun 2023 19:54:59 -0000 (UTC),
vjp2.at@at.BioStrategist.dot.dot.com wrote:

>not a secure connection
>
>daggnabbit, it's my machine
>
>and I can't find how to allow it
Not using https

Firefox is OUT OF IT's MIND

KenW

vjp2.at@at.BioStrategist.dot.dot.com wrote:
> not a secure connection
>
> daggnabbit, it's my machine
>
> and I can't find how to allow it

Which version of firefox?

<vjp2.at@at.BioStrategist.dot.dot.com> wrote:

> not a secure connection
>
> daggnabbit, it's my machine
>
> and I can't find how to allow it

Firefox is reporting that you cannot get a secure connection to the
site. The site redirects to an HTTPS page, but their cert does not
supply owner information, or they don't have a cert.

Also, if you disable Javascript, their <no-script> tag takes you to
their "lite" site, but that screws up, too. After another try, I go to:

http://archive.org/?noscript=true

For their full (Javascripted) web site that connects via HTTPS, , you'll
have to wait until they repair their fuck up on their end, or attempt to
bypass their auto-redirect to an HTTPS page (which disabling Javascript
will accomplish).

When I use Edge-Chromium, get the same cert failure (as in they try to
establish an HTTPS connection, but they don't have a cert). They are
redirecting to HTTPS, but they don't have a valid cert, so HTTPS is
impossible to establish.

https://www.ssllabs.com/ssltest/analyze.html?d=www.archive.org

Their cert seems okay enough although supporting deprecated TLS versions
and weak ciphers, so I suspect their redirection causes the problem.
For now, disable Javascript there to get their "lite" non-Javascripted
version.

The SSLlabs test denotes an HTTPS test cannot be performed due to a
"HTTP 302 moved" error.

https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/302

Wait until they fix their web site, or use without Javascript for now.

On 06/20/2023 4:14 PM, KenW wrote:
> On Tue, 20 Jun 2023 19:54:59 -0000 (UTC),
> vjp2.at@at.BioStrategist.dot.dot.com wrote:
>
>> not a secure connection
>>
>> daggnabbit, it's my machine
>>
>> and I can't find how to allow it
> Not using https
>
> Firefox is OUT OF IT's MIND
>
>
> KenW
I just type archive.org into the address window of Firefox 114.0.2
(64-bit), and it went directly to the site. I accessed a movie, and
watched it.

Question. Were you having trouble access the site or a specific items
on the site. I don't know for sure about Archive.org, but some sites
have country limitation. ie the copyright Laws in that country does not
permit the type of distribution as done on the site.

Also Thanks While I have accessed many books from the site, I did not
realize there were movies available on Archive.org also. I usually do a
search on the book title and access the item on Archive.org, and do not
go through the home page.

Wow, thanks

It made no sence

Firefox is out of the box with caelinux/ubuntu

--
Vasos Panagiotopoulos panix.com/~vjp2/vasos.htm
---{Nothing herein constitutes advice. Everything fully disclaimed.}---

vjp2.at@at.BioStrategist.dot.dot.com wrote:
> Wow, thanks
>
> It made no sence
>
> Firefox is out of the box with caelinux/ubuntu

Wow! Just visited your site you mention in your signature:
http://panix.com/~vjp2/vasos.htm
No comment from me.

On 21/06/2023 05:54, vjp2.at@at.BioStrategist.dot.dot.com wrote:
> not a secure connection
>
> daggnabbit, it's my machine
>
> and I can't find how to allow it
>
>
Works for me, typing in "archive.org" ends up at "https://archive.org/",
Windows 10 64-bit Pro, Firefox 114.0.2.

A someone else mentioned, have you messed up your SSL/TSL &c settings?

Cheers,
Gary B-)

Gary R. Schmidt wrote:

> Works for me, typing in "archive.org" ends up at "https://archive.org/",
> Windows 10 64-bit Pro, Firefox 114.0.2.
>
> A someone else mentioned, have you messed up your SSL/TSL &c settings?

Easy way to check without having to unpick any changes he may have made,
is to start firefox with a new blank profile, then see if it works ...

VanguardLH <V@nguard.LH> wrote:
><vjp2.at@at.BioStrategist.dot.dot.com> wrote:

>>not a secure connection

>>daggnabbit, it's my machine

>>and I can't find how to allow it

>Firefox is reporting that you cannot get a secure connection to the
>site. The site redirects to an HTTPS page, but their cert does not
>supply owner information, or they don't have a cert.

>Also, if you disable Javascript, their <no-script>tag takes you to
>their "lite" site, but that screws up, too. After another try, I go to:

>http://archive.org/?noscript=true

I can confirm that yesterday I had the same experience VanguardLH did.

Today, without allowing Javascript, the following happens:

http://archive.org/ is redirected to http://archive.org/?noscript=true
in the first instance. Thereafter, I get a two-step redirect, first to
https://archive.org/ then to https://archive.org/?noscript=true

Even http://archive.org/?noscript=true redirects to
https://archive.org/?noscript=true in later instances.

With Javascript allowed, http://archive.org/ is redirected to
https://archive.org/

This is how archive.org had behaved in the past.

>. . .

With Firefox, it was unclear if the site actually issues a certificate.
It would just say the site was not secure yet it won't info on a cert
(assuming it got one from the site). If the site proffers a cert,
Firefox would show its information even if expired, invalid, or some
defect with it, like multi-domain but not for the one visited. In
Edge-Chromium, it says the site does not have a certificate. That makes
sense since the client needs the site's cert to do https.

<noscript>
<div class="no-js-redirect-container"
data-owner="nginx">
<h2>Redirecting you to a lite version of archive.org...</h2>
</div>
<meta http-equiv="refresh" data-owner="nginx"
content="0;url=/?noscript=true">
</noscript>

<script
src="/offshoot_assets/js/webpack-runtime.4eb8fe3dbc34f76071ef.js">
</script>
<script
src="/offshoot_assets/js/index.d429d0da9281479fc70d.js">
</script>

When Javascript is disabled, HTML meta-refresh is used, so the visiting
client gets sent to the relatively addressed "/?noscript=true" web page.
That is also an HTTPS resource, and does proffer a cert issued by
GoDaddy to *.archive.org. That HTTPS page does have the server send a
cert to the client.

https://www.w3schools.com/tags/att_meta_http_equiv.asp
https://en.wikipedia.org/wiki/Meta_refresh

Javascript is not needed to use meta-refresh. That is an HTML directive
to tell the client that it should load a different web doc (location
change). With a delay of zero (content=0), the redirect is immediate.
Sometimes interstitial pages will use a non-zero delay to show a help or
info message before the doc gets replaced with a new one. I've even
seen meta-refresh used for an interstitial page that uses a CAPTCHA
validation to proceed to the next page.

If Javascript is enabled, the .js files specified inside the <script>
tag pairs get executed. The first .js is a webpack of bundled
Javascript resources, akin to what DLLs are to executable programs.
Loading the webkit preps the availability of its resources for later
Javascript code.

https://levelup.gitconnected.com/what-is-webpack-4fdb624597ae

The index.<gobbledygook>.js is likely the home page for the site when
Javascript is enabled, so the entire home page is scripted instead of
bits of it.

Both the non-Javascript and Javascripted "home" pages require HTTPS
connects, but the first is missing a cert while the second has one.
The site is declaring it wants an encrypted connection (HTTPS), but a
cert is needed for that, and the site neglected to install or assign a
cert to their Javascripted home page. Your web browser is told to use
an HTTPS connection, but is then not given the site cert to complete
that operation. Tis like saying "You must enter my house through this
locked door", but then you are not given the key to open it to get
inside. You stand there waiting for a key, but until then can't
describe what you see past the door.

I didn't hunt much around their web site looking for contact info to
alert a sys or web admin there about their cert fuck up. I did find:

https://help.archive.org/help/problems-or-errors/

which mentions sending e-mail to info@archive.org. I'll let you, or
others, like the OP, contact the site to report their bad cert setup.