View Single Post
Old 8th February 2017, 14:08   #1
RadioRookie
Junior Member
 
Join Date: May 2012
Posts: 30
Non-HTTPS Stream Link Breaks SSL

There is a major issue with the https://listen.shoutcast.com/xxxxx listen links resolving to http://streaming.shoutcast.com/xxxx when triggered on an SSL site. This is breaking SSL and it is affecting playback through several platforms.

The Facebook in-app browser has strict policies on playing media over SSL encrypted website sites with mixed content. If it detects the site is HTTPS and the shoutcast media stream is non-SSL, it does not play the audio. It will only play the audio over SSL in that case.

The strangest thing I am seeing is that the streaming.shoutcast.com/xxx stream is encrypted by SSL only in the Chrome Beta mobile browser. However, it is non-SSL in all other desktop browsers and other mobile browsers including FB in-app.

Please look at the screenshots. One depicts a listen.shoutcast.com/ stream resolving to a HTTP://streaming.shoutcast.com/ link on a desktop browser and the other shows the exact same listen.shoutcast.com/ stream link resolves to HTTPS://streaming.shoutcast on Chrome Beta mobile. This same link does not play on FaceBook in-app browser because it is on an SSL site and when you click on play, it opens up as HTTP://streaming.shoutcast.com instead of HTTPS://streaming.shoustcast.com

Please fix!
Attached Thumbnails
Click image for larger version

Name:	Screenshot_20170207-120131.png
Views:	799
Size:	59.3 KB
ID:	52999   Click image for larger version

Name:	streaming.jpg
Views:	726
Size:	21.3 KB
ID:	53000  
RadioRookie is offline   Reply With Quote