I literally just need to access a link to reset my discord password but for whatever reason discords reset link always does this to me on mobile and I’m nowhere near my desktop.
Any way to bypass this on android? I’ve tried chrome and Firefox both
Yeah that’s a security feature and it’s doing its job. If someone is trying to steal your Discord account, bypassing this error will give it to them.
Do you have anything like a VPN that does any kind of traffic manipulation? Some custom DNS server? Can you think of anything that might be different between your mobile and desktop connections that could cause this? Are you in a country/company/ISP that interferes with its citizens’ Internet access?
Edit: also, if you go to https://badssl.com/ and try some of the green ones, do they work or not? Especially HSTS
I have a VPN but I get the same issues disabling it. Only other thing I could guess is it might be root related?
Edit: all of them work except for 10000 sans, that one I can’t click accept risk and continue
Edit: so it turns out it was actually my VPN, turns out there’s some issue with either android or Nord where if I click to disconnect from the VPN it wasn’t actually disconnecting. I had to manually remove it from VPN permissions in the android settings
I think that is actually pretty common. If not, your DNS queries would need to go through your ISP and they could interpret what you are doing from them. You could manually configure DNS settings to route to a trusted source, which could address both.
It’s a bit above my paygrade tbh, most of the time it’s seamless and lightning fast, but times like this, or say, when I can’t port forward on my torrenting device because Nord doesn’t support that or split tunneling is ass, can be annoying when they arise.
Tbh as soon as my membership renews I’m finding a better VPN for my use cases, but for now it works “well enough”
Discord is blocking Nord from password reset links on a network level (probably because VPN servers are second only to Tor when it comes to malicious traffic). Frankly, I would’ve expected a CAPTCHA page instead, but it’s technically possible for an error to show up that way. You can try bypassing it by manually editing the address to make sure it starts with https.
Your VPN is actively trying to sslstrip you. Aside from the whole “that’s literally a crime people go to prison for” thing, that means you cannot ever trust that VPN again. Just because Discord bothered to secure their website doesn’t mean other apps do. You may already have been hacked if that is the case.
I’d be extremely cautious with VPN software because you’re essentially trusting them to be your ISP. If they’re doing permanent 40% off deals or (god forbid) sponsoring YouTubers, you should never trust them. It’s both funny and depressing how companies like PIA and Nord somehow convinced everyone that VPNs make your internet more secure while also not getting people to think for even a second about how much they trust these shady ass Caiman Island tax dodge scheme companies.
Do you have a VPN installed? If so, try disabling it and make sure that the Browser Protection setting is off (sometimes this runs even when VPN is disabled)
How old is your phone and have you been updating it? Maybe your phone is so old that the certificates on it are too old to recognize the current Discord certificate?
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: [email protected]
5. Engage respectfully: Harassment, flamebaiting, bad faith engagement, or agenda posting will result in your posts being removed. Excessive violations will result in temporary or permanent ban, depending on severity.
6. Memes are not allowed to be posts, but are allowed in the comments.
7. Posts from clickbait sources are heavily discouraged. Please de-clickbait titles if it needs to be submitted.
8. Submission statements of any length composed of your own thoughts inside the post text field are mandatory for any microblog posts, and are optional but recommended for article/image/video posts.
Uhh it should really not be doing that. What exactly is the error?
I mean it varies from browser to browser, and it usually happens when clicking a link from emails, not during normal browsing.
Honestly I’ve had this same issue for 3 phones now, I just assumed it was something that just happened sometimes
Yeah that’s a security feature and it’s doing its job. If someone is trying to steal your Discord account, bypassing this error will give it to them.
Do you have anything like a VPN that does any kind of traffic manipulation? Some custom DNS server? Can you think of anything that might be different between your mobile and desktop connections that could cause this? Are you in a country/company/ISP that interferes with its citizens’ Internet access?
Edit: also, if you go to https://badssl.com/ and try some of the green ones, do they work or not? Especially HSTS
I have a VPN but I get the same issues disabling it. Only other thing I could guess is it might be root related? Edit: all of them work except for 10000 sans, that one I can’t click accept risk and continue
None of them should have asked you to accept risk, they should go right to the green page. Did any of them give more specific error messages?
Edit: so it turns out it was actually my VPN, turns out there’s some issue with either android or Nord where if I click to disconnect from the VPN it wasn’t actually disconnecting. I had to manually remove it from VPN permissions in the android settings
I’m not sure I’d trust a VPN that MITMs my connections.
I think that is actually pretty common. If not, your DNS queries would need to go through your ISP and they could interpret what you are doing from them. You could manually configure DNS settings to route to a trusted source, which could address both.
VPN software can easily configure your DNS settings without doing MitM trickery on websites’ certificates.
It’s a bit above my paygrade tbh, most of the time it’s seamless and lightning fast, but times like this, or say, when I can’t port forward on my torrenting device because Nord doesn’t support that or split tunneling is ass, can be annoying when they arise.
Tbh as soon as my membership renews I’m finding a better VPN for my use cases, but for now it works “well enough”
Two possible reasons here:
Discord is blocking Nord from password reset links on a network level (probably because VPN servers are second only to Tor when it comes to malicious traffic). Frankly, I would’ve expected a CAPTCHA page instead, but it’s technically possible for an error to show up that way. You can try bypassing it by manually editing the address to make sure it starts with https.
Your VPN is actively trying to sslstrip you. Aside from the whole “that’s literally a crime people go to prison for” thing, that means you cannot ever trust that VPN again. Just because Discord bothered to secure their website doesn’t mean other apps do. You may already have been hacked if that is the case.
I’d be extremely cautious with VPN software because you’re essentially trusting them to be your ISP. If they’re doing permanent 40% off deals or (god forbid) sponsoring YouTubers, you should never trust them. It’s both funny and depressing how companies like PIA and Nord somehow convinced everyone that VPNs make your internet more secure while also not getting people to think for even a second about how much they trust these shady ass Caiman Island tax dodge scheme companies.
deleted by creator
Seems like the website you’re trying to access is using HSTS, which means it has told the browser “if the SSL is invalid, do not proceed”.
If the same issue occurs across multiple devices, I would be inclined to think that there’s some problem with the website.
Do you have a VPN installed? If so, try disabling it and make sure that the Browser Protection setting is off (sometimes this runs even when VPN is disabled)
deleted by creator
Why? Lol
Is the time on your phone correct?
Yes its correct
How old is your phone and have you been updating it? Maybe your phone is so old that the certificates on it are too old to recognize the current Discord certificate?