Chrome "mixed content" error breaks Blip after 1 second

[nhooey]

In at least Mac Chrome 51.0.2704.103 (64-bit), Blip only shows valid graph points for the first second after a refresh, then shows a max-latency red line after that. Refreshing always fixes it for a second, then it breaks again.

The JavaScript console says Mixed content: The page was loaded over HTTPS, but requested in insecure endpoint coming from jquery.min.js.

In Safari, Blip works fine without issue.

[dgentry]

Here's what that looks like.

[sourcejedi]

Thanks! Knowing this, I can switch the URL from https:// to http:// and have it work in Chrome

[cbowns]

https now fails in Safari 10.0.2 on OS X 10.11.6:

(this connection is up and working, btw)

[nolanw]

https fails on iOS too, making it hard to use this excellent tool on iPhones and iPads. Booping over to http works great though!

[Omicron18]

On Brave, even after I edited the url to http://, I got auto-redirected to https://, which breaks after a second. I had to turn off Upgrade connections to HTTPS on brave://settings.

[danielcompton]

I think switching to https://mlab-ns.appspot.com/ndt_ssl?policy=all might help here, it gives the FQDNs as dash separated so that they can be contacted over HTTPS. https://github.com/m-lab/mlab-ns/pull/51

https://github.com/apenwarr/blip/blob/a2075e3bab03a6f8e5ab0876ecdd2542818a40de/blip.js#L279

[Yostage]

I was able to make this work by enabling mixed content like this https://stackoverflow.com/questions/18321032/how-to-get-chrome-to-allow-mixed-content

[akhiljalagam]

same in firefox

[dtolnay]

In Firefox, it works after you "disable protection" under the padlock icon.

[Incog5]

you can also do this in chrome: click on the padlock icon, site settings, set "Insecure content" to allow

[apenwarr]

fixed in master! Should show up on the original server soon. Meanwhile, a different test server that doesn't seem to trigger the problem: http://blip.apenwarr.ca/