Hi BGovern, I'm not aware that there's anything wrong with the site's security setup. Let's try to figure out why your Firefox can't form a secure connection with the site.

First, do you get the page described in this article:

What do the security warning codes mean?

That page usually has an "Advanced" button which you can click to obtain more detailed technical information, including a code that usually starts with SEC_ERROR.

=> Could you copy/paste that section of the error page into a reply?

And to jump ahead, one of the most common codes we see is covered in this article: How to troubleshoot security error codes on secure websites.

=> Does that help at all?

Here is the code:

https://discordapp.com/

Peer’s Certificate issuer is not recognized.

HTTP Strict Transport Security: true HTTP Public Key Pinning: false

Certificate chain:

MIIDRjCCAi6gAwIBAgIEWock2DANBgkqhkiG9w0BAQsFADBAMS4wLAYDVQQDDCVD aXNjbyBVbWJyZWxsYSBTZWNvbmRhcnkgU3ViQ0EgY2hpLVNHMQ4wDAYDVQQKDAVD aXNjbzAeFw0xODAyMTQxODI0NDhaFw0xODAyMTkxODI0NDhaMGsxCzAJBgNVBAYT AlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRYwFAYDVQQHDA1TYW4gRnJhbmNpc2Nv MRYwFAYDVQQKDA1PcGVuRE5TLCBJbmMuMRcwFQYDVQQDDA5kaXNjb3JkYXBwLmNv bTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOpKAld0QT4f35DjGNA/ Cgw7GBySw60zXfm8W2G/4OS4eb9Puw7SRgVbZ24tvPrW0qr/AiGPK9S2ssQC2mKB OiUqOWN664VjYcdOBVtl2LA5RPRa3+ScuTSXytKEA9ppgjCtzR+PTLVmxyK5zKka 0T6dqkIzarepnRp+2OUsklrrQbWWg1PboJrbyuCIMuRm+85miqXyYgsZBfaXrYQ1 8meqYAqBgj/Wtw9F8p2cF2SdGt2q+4aQY4xcgy7uyJRVqODEOtWQ6S4L4CiABK/f VGuKcXDui8U5hJU7ubzqkh4F3A9B7pKW4sXyXPVv5UH30VZJpo58FIMt6t/ApwD7 wuMCAwEAAaMdMBswGQYDVR0RBBIwEIIOZGlzY29yZGFwcC5jb20wDQYJKoZIhvcN AQELBQADggEBAKldQ5XFFdxM7rmep6RVsbbO4RY8ohTmnoOXr1kA49yPjMG6ajtk eE0bDt4VwE3F1e+ADerGMoTuKzbfKm8BMj+nHldcCUmW+HgEJ2QO2/ScyyyUMwcu Jofg/LTGbAeXnb4CfplnrIAGoTIiAYEhhZqbdWBgstlxaFQedEthDvoIloyvbfh2 7PAiJoOuMibrx1sBszxLvIyGshgwGdYvnqTIsqN0VJLVijH1pZYfEr76JzRWdLsy d7+wdy8oMRDbbU2ZTBSC4IrNQHkkaRotd0zpx5GbOD20WNCx4DB3GS0dn3y6q1pU IabNYcgcYn69mekkxWyUyePK2JrFpSh2ySQ=

MIID3DCCAsSgAwIBAgIQG9zOYTosQZGnHQQ7WYfPrzANBgkqhkiG9w0BAQsFADA3 MSUwIwYDVQQDDBxDaXNjbyBVbWJyZWxsYSBQcmltYXJ5IFN1YkNBMQ4wDAYDVQQK DAVDaXNjbzAeFw0xODAyMTQxODMzMzlaFw0xODAyMjUxODMzMzlaMEAxLjAsBgNV BAMMJUNpc2NvIFVtYnJlbGxhIFNlY29uZGFyeSBTdWJDQSBjaGktU0cxDjAMBgNV BAoMBUNpc2NvMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6koCV3RB Ph/fkOMY0D8KDDsYHJLDrTNd+bxbYb/g5Lh5v0+7DtJGBVtnbi28+tbSqv8CIY8r 1LayxALaYoE6JSo5Y3rrhWNhx04FW2XYsDlE9Frf5Jy5NJfK0oQD2mmCMK3NH49M tWbHIrnMqRrRPp2qQjNqt6mdGn7Y5SySWutBtZaDU9ugmtvK4Igy5Gb7zmaKpfJi CxkF9pethDXyZ6pgCoGCP9a3D0XynZwXZJ0a3ar7hpBjjFyDLu7IlFWo4MQ61ZDp LgvgKIAEr99Ua4pxcO6LxTmElTu5vOqSHgXcD0HukpbixfJc9W/lQffRVkmmjnwU gy3q38CnAPvC4wIDAQABo4HaMIHXMB8GA1UdIwQYMBaAFDdBmFo9IC5nyg0yyyfJ 4MXtup/pMBIGA1UdEwEB/wQIMAYBAf8CAQAwDgYDVR0PAQH/BAQDAgGGMB0GA1Ud DgQWBBTBb3BLMTnjtVIJTKw4q+WZcHjfuzBxBggrBgEFBQcBAQRlMGMwIwYIKwYB BQUHMAGGF2h0dHA6Ly9vY3NwLm9wZW5kbnMuY29tMDwGCCsGAQUFBzAChjBodHRw Oi8vY2FjZXJ0cy5vcGVuZG5zLmNvbS80NDg2M0FCMTU0NjQ1OEQ3Mi5jcnQwDQYJ KoZIhvcNAQELBQADggEBAG2JVJX8oZRwBldc/7sYc4ELkDNnEmiphWIj1L0ZNaSG 4ycFUS+YvdF7R5hkAtoIKyv2iT2y9YDbuz6o4S1e5rXMMiW4eqr7+vMlQNt+tYj+ 0rfhunQjnIPHLl4CLrpcjonsjZVePLiSHW8T+Fag1n4WJmDZtgZOAzwvZMbj92WD oB1UPtb9XfuTrBbimlGT6VNINAwtRqYdPHzM2jjm2Wi2ZVDw5wxUKRkTUdILE6a1 SicyomlwIZObXiF5m6MXZFaGHOV7yGYEADHhpwp3AhLhPlQ/aIvJdG1vyNQoto4n aHhMhQ4SXaJ8uCPjQpSDDD7NlU8tikA6a5R6OgXXiUo=

MIIEgTCCA2mgAwIBAgIJBEhjqxVGRY1yMA0GCSqGSIb3DQEBCwUAMDExDjAMBgNV BAoTBUNpc2NvMR8wHQYDVQQDExZDaXNjbyBVbWJyZWxsYSBSb290IENBMB4XDTE2 MDYyODE1NDAxMVoXDTIxMDYyODE1NDAxMVowNzElMCMGA1UEAwwcQ2lzY28gVW1i cmVsbGEgUHJpbWFyeSBTdWJDQTEOMAwGA1UECgwFQ2lzY28wggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQCvR/Tm+U0VahUptIKAkU7BwSKgO1HO0CMdZXCO OLFh9+pCoG1Ly7UiudFAumlfA4kzs1SS9xR2ax0TYIQG84hJsoOPSaZU6wkWWJDq mZVD4+LSPZLUuMWbgWy8/BuqKKL32JjInU/LRXF3AaapHT6eprR5vv5MYSWzFv4r QzhMXy8i8eK48EKsQyf3UBUHdUmOQFBYuRkYlKdave0ipxjMUYKh6DwJX+5psl7S lwHxzKxppwBqZhI5GiuWIs4RhuB+1hOr1zuAb9Oy8WNryXTijXQJ+thl74oo0CoV XS2nZQyDk1X2CUOpTy2Kj4W4ucd4Y1jRp37FkWQwivWq5DU5AgMBAAGjggGUMIIB kDAOBgNVHQ8BAf8EBAMCAYYwEgYDVR0TAQH/BAgwBgEB/wIBATBSBgNVHSAESzBJ MEcGCisGAQQBCRUBHQAwOTA3BggrBgEFBQcCARYraHR0cDovL3d3dy5jaXNjby5j b20vc2VjdXJpdHkvcGtpL3BvbGljaWVzLzAdBgNVHQ4EFgQUN0GYWj0gLmfKDTLL J8ngxe26n+kwTAYDVR0fBEUwQzBBoD+gPYY7aHR0cDovL3d3dy5jaXNjby5jb20v c2VjdXJpdHkvcGtpL2NybC9jaXNjb3VtYnJlbGxhcm9vdC5jcmwwgYcGCCsGAQUF BwEBBHsweTBJBggrBgEFBQcwAoY9aHR0cDovL3d3dy5jaXNjby5jb20vc2VjdXJp dHkvcGtpL2NlcnRzL2Npc2NvdW1icmVsbGFyb290LmNlcjAsBggrBgEFBQcwAYYg aHR0cDovL3BraWN2cy5jaXNjby5jb20vcGtpL29jc3AwHwYDVR0jBBgwFoAUQ3MA 3iS6QBpAVCx9fNUASIkMcKQwDQYJKoZIhvcNAQELBQADggEBAAhlqdX9AAHOyNPv KA44ulyoprNnXp62XeYnlKRgCPvShWW2eDIMOePS8+RvuPGJdtAm1YoPa9hn0WO2 L+jHmnob7so2yc3c02uio9Q4VqPCuA1T/RmmXerpvHtxx1FfUhboBoiGvP/dnFTX DF0lzLEllP3tYZOH0wjsTjhPERN60zR29lKHludW9ZRc5Fkxj5ZwALvAZ2Iqb0HG DwIhJJjXUpJjZXQPRGQ8N+VDx2UqTf74g/rpKcALUERGFrrJMO0Z7yaiqVsVQ9/J 4FAJCjB6fkivL5SvmDWCB1ZeiRc2ud5qm/II0OuGdtX+mo0/Lo9Lh9Tdg2LxUxEn 7cAtMK0=

Also it's blocks it on all my browsers.

Are you on a work network? The certificate is issued by OpenDNS, a filtering service that many companies use. While OpenDNS is best known for blocking malware and phishing sites, companies also can select from different lists to enforce company policies -- like no social networks, as an example.

No this is my home network

I have made sure to whitelist the website on my OpenDNS

It won't let me add any exceptions so I am not sure how to access it.

BGovern said

It won't let me add any exceptions so I am not sure how to access it.

Firefox or OpenDNS?

Firefox

See also:

• https://support.opendns.com/hc/en-us/articles/227988767--opendns-com-Certificate-errors-Adding-Exceptions
• https://support.opendns.com/hc/en-us/articles/227988067-Getting-Started-Blocking-Allowing-Specific-Domains-with-Whitelist-Blacklist

cor-el said

See also:

• https://support.opendns.com/hc/en-us/articles/227988767--opendns-com-Certificate-errors-Adding-Exceptions
• https://support.opendns.com/hc/en-us/articles/227988067-Getting-Started-Blocking-Allowing-Specific-Domains-with-Whitelist-Blacklist

I have done this before.

BGovern said

jscher2000 said

BGovern said

It won't let me add any exceptions so I am not sure how to access it.

Firefox or OpenDNS?

Firefox

The site specifies "Strict Transport Security". Firefox does not display the "Add Exception" button in that case, but usually there is a note explaining that.

You could erase Firefox's memory of this directive. Then you should get the OpenDNS page and you can see whether it offers any useful information or options. Here's how:

Open your current Firefox settings (AKA Firefox profile) folder using either

• "3-bar" menu button > "?" Help button > Troubleshooting Information
• (menu bar) Help > Troubleshooting Information
• type or paste about:support in the address bar and press Enter

In the first table on the page, click the "Open in Finder" button. This should launch a new Finder window. If Finder has highlighted a folder with a semi-random name like a1b2c3d4.default, click into that folder.

Once you see the list of your settings files, leave that window open, and switch back to Firefox. Then Quit Firefox using either:

• "3-bar" menu button > "power" button Quit
• (menu bar) Firefox > Quit

Pause while Firefox finishes its cleanup, then rename SiteSecurityServiceState.txt to something like SiteSecurityServiceStateOLD.txt. If you prefer to preserve as much information as possible, you can edit out just the line in the file for discordapp.com, but I'm not sure TextEdi is safe for that.

Start Firefox back up again, and you should get the "Add Exception" button on the error page the next time.

I'm here a confused what to do next. I don't see a Sitesecurityservicestate.txt

Here is a screenshot

On the right side of your screenshot the list goes from A to E. Can you scroll it down to the "S" files?

Does this look right?

Doesn't work see:

I did restart firefox

Hmm, that's strange...

Okay, there is also an HSTS flag for discordapp.com is built into Firefox. To bypass that you could try this:

(1) In a new tab, type or paste about:config in the address bar and press Enter/Return. Click the button promising to be careful or accepting the risk.

(2) In the search box above the list, type or paste transp and pause while the list is filtered

(3) Double-click the network.stricttransportsecurity.preloadlist preference to switch the value from true to false

I don't know whether that will resolve the issue immediately or whether you need to remove the file again.

Now it is blocked by OpenDNS but is very weird see: