Guardian Website

[Balin64]

Hi all,

I'm stumped by this one. I have a guardian.co.uk subscription but the last couple of days it has not loaded properly. Attached is a screen shot. Up to date Mac OS and Safari. Has anyone else experienced this problem? Screen attached.

 

[Floris]

When you get the exact location of those images, say right click and copy image location, then load that in a new tab. Does the image load or do you get an error msg like 404 not found?
Any content blocking extension you're running?

When I load it in Chrome it loads fine, with uBlock even, just the ads disappeared at the top.
In Safari with no blockers, it all loads for me, including the advertisement.

 

[Balin64]

Hey Floris.

Thanks for the response. I haven't installed any extensions. Right out of the box install.

I do recall seeing something about a certificate authentication in a pop up window, but with a site like the guardian I figured it was some oddball error.

 

[Floris]

If they host their site on https, and their content on http, or remotely, and it's not the same domain, maybe that could give issues. I am curious to see what error the browser has for those broken images.
Can you test with Chrome as well perhaps, if you have it installed.

 

[Balin64]

If they host their site on https, and their content on http, or remotely, and it's not the same domain, maybe that could give issues. I am curious to see what error the browser has for those broken images.
Can you test with Chrome as well perhaps, if you have it installed.

Thanks.

I did try Chrome. And I got this error message. Very strange.

 

[Floris]

I went to the site in Chrome, clicked the lock and checked the certificate. I don't know why their cert covers a billion urls in their dns, but i guess that's just how they do business. Anyway.. it appears valid on my system, the sha1 fingerprint is the same on my system (see screenshot) as https://www.grc.com/fingerprints.htm reports it back. And that's how it shows on another system, another network as well.

Hopefully this helps you determine where it goes wrong perhaps?
The cert in that error msg says it's revoked. Maybe try google's open DNS vs what you use now? Maybe your ISP or anti virus etc is doing a man in the middle to do their investigation or ad injection.

 

[Balin64]

Thanks for the tips Floris. I'll investigate further.

 

[Floris]

Thanks for the tips Floris. I'll investigate further.

I am curious though. My Canadian friend can for example not access certain sites due to them being on an IP range of Amazon web services. The site loads, but images on their cdn do not. And certain certs dont load for some reason because of this, crippling https sites that have 1 item on aws. Other aws stuff works, but when it doesn't work and we check the IPs of the resources- they are aws. We haven't been able to figure out why this is. We had a list of bout 23 things to try, failure on all. grrr. So i understand this frustration.

 

[997440]

I suspect that it is a cert issue. In the OP screenshot, notice the missing indicator(s) in the address bar that would identify the site as an https one. The images (jpegs) probably haven't been loaded because the page hasn't completely loaded.

The cert at The Guardian was issued by GlobalSign with a "Begins On " date of Oct. 10, 2016. There were recent GlobalSign cert problems discussed here -- https://forums.macrumors.com/threads/sierra-some-websites.2006589/

In that case, the problem ended up being acknowledged by the site owner by placing a banner (see post #30) at the bottom of the page. If this is the same or is a similar problem at The Guardian, note that different browsers (including versions of the same browser) handled the Soundcloud problem with differing behaviors.