Some Eclipse Foundation services are deprecated, or will be soon. Please ensure you've read this important communication.
Bug 567260 - Chrome is blocking my download of the Eclipse Installer
Summary: Chrome is blocking my download of the Eclipse Installer
Status: RESOLVED FIXED
Alias: None
Product: Community
Classification: Eclipse Foundation
Component: Website (show other bugs)
Version: unspecified   Edit
Hardware: PC All
: P1 critical (vote)
Target Milestone: ---   Edit
Assignee: phoenix.ui CLA
QA Contact:
URL:
Whiteboard:
Keywords:
: 567295 (view as bug list)
Depends on: 547932
Blocks:
  Show dependency tree
 
Reported: 2020-09-22 16:08 EDT by Christopher Guindon CLA
Modified: 2020-10-09 11:17 EDT (History)
3 users (show)

See Also:


Attachments
Screenshot (12.91 KB, image/png)
2020-09-22 16:08 EDT, Christopher Guindon CLA
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description Christopher Guindon CLA 2020-09-22 16:08:14 EDT
Created attachment 284228 [details]
Screenshot

Chrome is now blocking us from downloading the Eclipse Installer if the file is served on HTTP:

On this page, 
https://www.eclipse.org/downloads/download.php?file=/oomph/epp/2020-09/R/eclipse-inst-jre-mac64.dmg&mirror_id=1270

.. chrome tries to download the Eclipse Installer from this mirror:

http://downloads.yoctoproject.org/eclipse-full/oomph/epp/2020-09/R/eclipse-inst-jre-mac64.dmg

Based off this article, this change was planed:
https://blog.chromium.org/2020/02/protecting-users-from-insecure.html

In Chrome 85 (released September 2020):
Chrome will warn on mixed content downloads of images, audio, video, and text.
Chrome will block all other mixed content downloads.

In Chrome 86 (released October 2020) and beyond, Chrome will block all mixed content downloads.

My workaround to download the Eclipse Installer was to use Firefox.
Comment 1 Denis Roy CLA 2020-09-23 13:48:32 EDT
*** Bug 567295 has been marked as a duplicate of this bug. ***
Comment 2 Jonah Graham CLA 2020-10-09 09:41:45 EDT
:-( I just hit this and can't download anything in Chrome from eclipse mirrors*. My workaround was to download from eclipse.org directly.

Can you please turn off http:// mirrors for Chrome 86+ user agents? Or display a message?

BTW It looks like the transparent mirroring on download.eclipse.org didn't get in the way when I tried to download as there was no redirect. Have you turned off the transparent mirroring?

* I tried a handful of mirrors and then got a "Eclipse downloads - too frequent
You have exceeded the amount of times you can call this page."
Comment 3 Jonah Graham CLA 2020-10-09 09:43:51 EDT
I would like to see this raised to a critical issue as it looks like to me many (most) users in the coming weeks as they get the Chrome update will not be able to download and the "can't be downloaded securely" message makes it look like eclipse.org is not secure.
Comment 4 Denis Roy CLA 2020-10-09 10:02:08 EDT
I am on this.
Comment 6 Jonah Graham CLA 2020-10-09 10:32:58 EDT
Thank you Denis for the quick turnaround. I can now download with ease again.

Now to convince the mirrors that don't have https to provide them :-) I especially like eclipse.mirror.rafal.ca as it seems to be very close and I can download from it a nearly local network speeds!
Comment 7 Denis Roy CLA 2020-10-09 11:17:49 EDT
I've sent an email to eclipse-mirrors advising of the change.


I've also sent an email to Rafal personally, as he doesn't maintain a website (that I know of) - only mirrors.