Firefox reader says "site not secure" with HTTPS
from blackberry@midwest.social to privacy@lemmy.ml on 01 Feb 2025 16:10
https://midwest.social/post/22545991

if I go to an HTTPS site and it has a reader option, this is shown. it happens on every site. thoughts?

Android Firefox

#privacy

threaded - newest

JASN_DE@lemmy.world on 01 Feb 2025 16:16 next collapse

So what’s the problem according to FF?

blackberry@midwest.social on 01 Feb 2025 16:22 collapse

browsing the site: “connection is secure” https cert signed by whoever

browsing the reader option: “connection is not secure”

morgunkorn@discuss.tchncs.de on 01 Feb 2025 16:22 next collapse

The website itself doesn’t seem to have a problem with its certificate: www.ssllabs.com/ssltest/analyze.html?d=www.fossli…

it might be related to the root certificates available on your device. you might be able to click the barred icon and read details about the error that’s encountered

merde@sh.itjust.works on 01 Feb 2025 16:24 next collapse

“connection is not secure”

you can “enable in all tabs” “HTTPS-Only mode”, if that bothers you. iirc it’s not on by default, which permits to fallback on HTTP

?

edit : i see, reader is not online, i believe. It’s an in browser rendering of the site.

donuts@lemmy.world on 01 Feb 2025 16:27 next collapse

Apparently it’s because it’s using a self signed certificate, but I’m having trouble finding exact sources that confirm this.

Lemmchen@feddit.org on 01 Feb 2025 16:36 next collapse

Check your time and date.

BakedCatboy@lemmy.ml on 01 Feb 2025 16:46 next collapse

There’s a ticket in the Firefox bug tracker that appears to be tracking this: bugzilla.mozilla.org/show_bug.cgi?id=1913601

Makes sense, because even in reader mode it shows https, and the issue happens on other major sites like Wikipedia.

Darkassassin07@lemmy.ca on 01 Feb 2025 17:02 next collapse

github.com/mozilla-mobile/firefox-ios/pull/16545

Reader mode loads the page from a local copy cached from the non-reader mode connection; via localhost, which doesn’t support https. (or rather, uses a self-signed cert which appears insecure). As this connection is entirely internal to the device, proper https isn’t necessary.

Later versions of the app will hide that icon in reader mode, but it doesn’t look like that’s made it to android yet.

TrickDacy@lemmy.world on 01 Feb 2025 18:30 collapse

Did you check the system clock for accuracy?