113
votes
Accepted
Why does typing an IP address instead of the corresponding domain name not show the website?
Because the proper HTTP Host header is often required to actually get the intended site.
It's very common to host multiple web sites on the same IP address and distinguish between them based on the ...
- 35.1k
103
votes
Accepted
Chrome S3 Cloudfront: No 'Access-Control-Allow-Origin' header on initial XHR request
You're making two requests for the same object, one from HTML, one from XHR. The second one fails, because Chrome uses the cached response from the first request, which has no Access-Control-Allow-...
- 22.7k
84
votes
Accepted
Site is accessible by domain in all browsers but Chrome
Your problem is because you are using a .dev domain.
The entire .dev top-level domain (TLD) is on the HSTS preload list and that means you must access it using HTTPS. According to your nginx config ...
- 3,122
25
votes
Accepted
SSL certificate in system store not trusted by Chrome
In Ubuntu, Chrome uses its own certificate store. You can import your RootCA.crt in Chrome's
settings -> privacy and security -> manage security keys -> manage certificates -> authorities
Note that ...
- 366
22
votes
Accepted
Chrome reports ERR_SPDY_INADEQUATE_TRANSPORT_SECURITY connecting to local web server over HTTPS
Http/2 requirements as per https://httpwg.org/specs/rfc7540.html#rfc.section.9.2.2 :
9.2.2 TLS 1.2 Cipher Suites
A deployment of HTTP/2 over TLS 1.2 SHOULD NOT use any of the cipher suites that are ...
- 35.1k
17
votes
Accepted
why Chrome browser doesn't recognize my nginx http2 server?
As per my answer on StackOverflow:
Will likely be one of two reasons:
You are using anti-virus software and it is MITM your traffic and so downgrading you to HTTP/1.1. Turn off https traffic ...
- 4,616
14
votes
Why does typing an IP address instead of the corresponding domain name not show the website?
Because usually web servers use "virtual server" technology and are able to answer on your HTTP request within exactly the domain name you request, but not the IP address of the web servers. Thanks to ...
- 149
10
votes
Wildcard *.localhost SSL with Nginx and Chrome
So ultimately the answer seems to be that you simply can't create a certificate for *.localhost that Chrome will accept.
My solution was to change to using *.dev.localhost instead, which worked a ...
- 455
10
votes
Why does typing an IP address instead of the corresponding domain name not show the website?
In Apache, you can host many websites using just one single IP address. This is called virtual hosting. It's how subdomains can be created, even standalone domains. This is done by setting up an ...
- 219
10
votes
Refused to frame '' because it violates the following Content Security Policy directive: "frame-src *"
Had exactly that problem today.
I solved it by using
frame-src data:
Btw. '*' is only a wildcard for urls. data: 'unsafe-inline' and 'unsafe-eval' have to be added individually.
- 101
10
votes
Accepted
nginx conf: http2 module not working in Chrome in ubuntu 18.04
I suspect it’s this:
# Avoid mime type sniffing
add_header X-Content-Type-Options: nosniff;
HTTP/2 is a bit more strict about HTTP Headers than HTTP/1.1 was and in this header, unlike your others, ...
- 4,616
8
votes
How to debug pac file in chrome without alert function?
I didn't find the information anywhere, but chrome shows alert in chrome://net-internals/#events tab with description : PAC_JAVASCRIPT_ALERT.
Also you can find what chrome use as proxy in tab : chrome:...
- 305
8
votes
Why does typing an IP address instead of the corresponding domain name not show the website?
I like to use the "house" terminology.
You can quite easily send a letter to a house without a name on it and it'll arrive at the house.
If you put the person's name on it then you're sending to the ...
- 173
7
votes
Chrome S3 Cloudfront: No 'Access-Control-Allow-Origin' header on initial XHR request
As of Nov 2021, CloudFront directly supports Response Headers Policies. These include CORS, security and custom headers. There is no need to inject custom headers via Lambda@Edge or CloudFront ...
- 71
6
votes
Accepted
Is is possible to disable Certificate Transparency (audit log checking) of certificates in Chrome?
Assuming that the example you're pointing to is actually the one about "The site is using outdated security settings", and not "does not have public audit records", about 99.99% sure that your problem ...
- 96.3k
5
votes
Accepted
Conflict with Chrome and RFC2606
What you are doing is wrong.
localhost is a hostname pointing to 127.0.0.1 not a domain, so adding hosts to it as if it is a domain but pointing somewhere else is logically incorrect.
You may be ...
- 8,176
5
votes
How can I fix this Windows 2012 Dashboard Error : Google Update Service
We had this issue too - tried manually starting and the service would stop automatically. Explanation of issues above was clear, so we removed the service from scope/view and are green.
Maybe I'm ...
5
votes
Accepted
Chrome desktop and android refuses to accept trusted self-signed cert
Chrome requires SAN. For two years now, Chrome has used the Subject Alternative Name (SAN) extension in a certificate, NOT the CommonName (CN) attribute in the Subject as was used last century. (Other ...
- 3,302
4
votes
Accepted
Windows XP, Chrome 48 and RC4
Your site needs to support a cipher that is available in Windows XP, which is why you are getting the cipher suite mismatch. Your SSL Labs test report lists the following ciphers:
...
- 459
4
votes
Accepted
Why does Chrome trust the same authority on this certificate, but not the other?
Both work fine in Chrome on W10. On Firefox I get the following error "parts of this page are not secure (such as images). For example, this link. Firefox is often fussier about certificates and ...
- 31.9k
4
votes
Accepted
Chrome Self-Signed Wildcard Certificate Error
You need to recreate the certificate and assign a SubjectAltName. This works for me on OSX 10.11.6 with Brew:
openssl req -x509 -sha256 -nodes -days 3650 \
-newkey rsa:2048 -keyout visible.priv.key \ ...
- 156
4
votes
Authenticate to LXD rest API over network , certificate auth keeps failing
Going thru a lot of trial and errors. I have finally stumbled upon this Link. It's part of Configuration of LXD works just perfectly. Below are the steps I followed.
Install ZFS , LXD and then do ...
4
votes
Accepted
403 - Forbidden: Access is denied in Chrome
You have accidentally configured client authentication on your IIS server. The server now expects your browser to send a certificate to the server in order to authenticate you.
Start the IIS ...
- 4,584
4
votes
Accepted
NET::ERR_CERT_COMMON_NAME_INVALID in Chrome but not in IE
Your certificate is missing the Subject Alternate Name (SAN) entries.
Modern browsers require that the SAN is present, even if it it only contains the common name. Recreate your certificate with a SAN ...
- 23.4k
3
votes
SSL initial connection painfully slow in Chrome
I looked the web site https://www.hoerschiff.at/ and could see many different problems. I would separate the problem in groups:
SSL/TLS problems
HTTP/2 support
minimizing images
usage common known ...
- 259
3
votes
Accepted
Chrome makes way too many requests (~22000) while downloading MP4 video (~34MB)
The problem was caused by video files (namely by the converter that was used).
The files which caused the problem were converted with Format Factory v2.6.
After upgrade to v3.7 and reconverting the ...
- 211
3
votes
Chrome reports ERR_SPDY_INADEQUATE_TRANSPORT_SECURITY connecting to local web server over HTTPS
Here's some PowerShell I created to temporarily disable HTTP/2 in IIS:
Set-ItemProperty -Path HKLM:\System\CurrentControlSet\Services\HTTP\Parameters -Name EnableHttp2Tls -Value 0 -Type DWord
Set-...
- 365
3
votes
I've switched back from HTTPS to HTTP now the page doesn't load in Chrome
You probably either had permanent redirect from HTTP to HTTPS, or you had HTTP strict transport security (HSTS) enabled which are still in your cache.
As far as I know clearing your cache should work ...
- 77.4k
3
votes
Accepted
How do I redirect the Google Chrome appdata/local folder?
Do you try Set user data directory policy?
It documented here
And there list of available path variables
In your case it is useful variable ${roaming_app_data}
- 3,305
3
votes
How to throttle Chrome's CPU usage?
There's no native way to throttle CPU usage, but you can set process affinity to only one core.
One way to do this via Group Policy is to deploy a scheduled task. If you only have one server, you can ...
- 47.4k
Only top scored, non community-wiki answers of a minimum length are eligible