Redirect loops between HTTP and HTTPS versions of diyAudio on Chrome and Firefox

Status
This old topic is closed. If you want to reopen this topic, contact a moderator using the "Report Post" button.
Jump to Latest
Jason

Jason

Switches things on and off again
Joined 2000
diyaudio.com
Paid Member
It has come to my attention that there are some issues with how we have historically been using "301" redirects to tell browsers whether to use the secure or non-secure version of diyAudio.

This can cause redirection loops, and in fact when we eventually move to HTTPS in the coming weeks/months, could cause FireFox and Chrome to go into an infinite redirection loop and prevent you from being able to visit diyAudio at all*. I believe these redirects are what have been causing the redirection issues that a few members have reported over the last week in Chrome and Firefox.

We have now moved to using 302 redirects instead of 301 redirects to avoid this problem in the future but many people will now have permanent redirects from https://www.diyaudio.com to http://www.diyaudio.com. When we switch to HTTPS, this could cause issues. There are various solutions suggested,

The problem is primarily that while some browsers only store a 301 redirect for a single session, Chrome and Firefox store these redirects for eternity. A "hard refresh" of your browser will not remove them and they stay forever.

Therefore, I ask that anyone using Chrome or Firefox who wants to avoid problems now or in the future, and thinks "better to be safe than sorry" clears their "redirect cache" today to remove these evil "eternal" redirects.

You need to follow very specific instructions for each browser:

Chrome
  • Fix: Go to the [Chrome Menu] (hamburger bar menu square) or [Chrome]->[Preferences]. Then go to [Settings]->[Show Advanced Settings]->[Privacy and Security]->[Clear Browsing Data]. Check "Cached Images and files" only, and uncheck everything else (this will make sure you don't lose your saved login info). Then click "Clear Browsing Data".
  • Further reading: Superuser: How can I make Chrome stop caching redirects

FireFox
  • Fix: Press CTRL + SHIFT + Delete, change time range if needed, click on "Details" and check "cache". Uncheck everything other than "cache" so you don't lose your saved login info).
  • Alternative fix: Locate diyAudio in the history sidebar. Right click it and select “Forget about site site”
  • Alternative fix: If diyAudio is not in your history sidebar, choose [Menu]->[Tools]->[Options]->[Advanced]->[Network]->[Clear Now] or [FireFox]->[Preferences]->[Advanced]->[Network]->[Clear Now]
  • Further reading: Superuser: Clear 301 redirect cache in FireFox

Learn more:

* There are some mitigation strategies, which I will be implementing!
 
Last edited:
Jason

Jason

Switches things on and off again
Joined 2000
diyaudio.com
Paid Member
Pano said:
Be sure to have your user name and password handy before you do the reset. The "Forget" will delete your automatic login, if you use one.
Click to expand...

Good point, I'll promote the non-login info killing options as the primary fix option!

Capt Grogg said:
Opera browser says it is based on Chrome, Seamonkey is related to Firefox, are they affected by this?
Click to expand...

Probably.

MagicBus said:
No problem at all with Firefox on windows XP here. Since HTTP and HTTPS seems "greek" to me :D have I understood correctly that my setup won't be compatible with the new platform?
Click to expand...

Everything will be compatible with the new platform (actually, except some ancient insecure EOL configs like XP + IE).
 
Status
This old topic is closed. If you want to reopen this topic, contact a moderator using the "Report Post" button.
Top Bottom