Increasing Problems with my Server Images not Showing in AMASS

Pekka wrote in post #19143145
UPDATE: I found the "problem":

"Mixed Content: The page at 'https://photography-on-the.net …70&mg=34664&i=i​100320315' was loaded over HTTPS, but requested an insecure element 'http://www.ware.myzen.​co.uk …f%20A01_001_08-07-19.jpg'. This request was automatically upgraded to HTTPS, For more information see https://blog.chromium.​org/2019/10/no-more-mixed-messages-about-https.html"

Bottom line is that https is required for all sites. Browser change links from http to https automatically "on the fly" when on secure pages like POTN.

Your server does not deliver secure content, so it fails.

Ah ok that makes sense even to me.

Not sure if I can do anything about as it is a static server, no scripting - but free!!!

I will check.

When I go to your site and click "copy image location" from the image,. and then paste it into this forum using simple img tags,. for me it shows up. Does everyone see it?

Nice shot!

CyberDyneSystems wrote in post #19143324
When I go to your site and click "copy image location" from the image,. and then paste it into this forum using simple img tags,. for me it shows up. Does everyone see it?

I see only "Image failed to load from remote server" in your post, Jake

CyberDyneSystems wrote in post #19143324
When I go to your site and click "copy image location" from the image,. and then paste it into this forum using simple img tags,. for me it shows up. Does everyone see it?

nope...

HOSTED PHOTO
please log in to view hosted photos in full size.

Thanks all those taking an interest.

For info, the method Jake used to insert my image is the way I normally post so visibility of this image is a good test.

Can those with problems indicate their OS type & Browser programme, for me Widows 10, Edge and IE work OK. Also Iphone IOS 14 and Safari are OK.

Had a quick search on the topic of mixed content.

This article https://dev.to …-from-https-and-http-3n31 suggests Image source URLs are Passive mixed content which might be allowed by browsers depending on browser type and settings..

If I open said image in Edge and click on the Not Secure indication I get some control options as attached.

HOSTED PHOTO
please log in to view hosted photos in full size.

Doesn't show up for me. Just the "failed to load" message

Windows 10, Google Chrome

OK I just tried Windows 10 Chrome and it still works OK, with the same Not Secure warning I get with EDGE.

Strangely it is set to block unsecure content but still shows it......

HOSTED PHOTO
please log in to view hosted photos in full size.

HOSTED PHOTO
please log in to view hosted photos in full size.

A little later I tried again with Chrome and I reproduced the problem.

I changed the site setting to allow blocked content and the problem goes away.

I don't know why it worked OK first time, but this seems to be the fix, the change appears to be specific to the site (POTN).

This setting in Edge seems to have no effect.

HOSTED PHOTO
please log in to view hosted photos in full size.

Lester Wareham wrote in post #19143527
A little later I tried again with Chrome and I reproduced the problem.

I changed the site setting to allow blocked content and the problem goes away.

I don't know why it worked OK first time, but this seems to be the fix, the change appears to be specific to the site (POTN).

This setting in Edge seems to have no effect.

Hosted photo: posted by Lester Wareham in
./showthread.php?p=191​43527&i=i262496972
forum: Forum Talk

That affects only your personal screen. The only solution is to get your image server to serve in https.

I bet most browsers will do the forced conversion to https in the future. If we have all in https, our certificate would change to "not secure" if even one element on page is http only.

SSL certificate cost little or nothing and DV SSL needs only a simple domain owner verification process.

Pekka wrote in post #19143574
That affects only your personal screen. The only solution is to get your image server to serve in https.

I bet most browsers will do the forced conversion to https in the future. If we have all in https, our certificate would change to "not secure" if even one element on page is http only.

SSL certificate cost little or nothing and DV SSL needs only a simple domain owner verification process.

I am looking into it and understand it is my server not in line with specs.

I have always used free server space from my ISP, I am not sure if I can continue to use that but in any event it seems a new domain will be needed or a change of operating method.

In the meantime this thread is about a work around for the current situation.

Lester Wareham wrote in post #19143785
I am looking into it and understand it is my server not in line with specs.

I have always used free server space from my ISP, I am not sure if I can continue to use that but in any event it seems a new domain will be needed or a change of operating method.

In the meantime this thread is about a work around for the current situation.

I think you should first contact your ISP and ask them to SSL their main domain myzen.co.uk and its subdomains (wildcard certificate). They should have done SSL already, really.

Potentially, they might have an SSL option already?