Download link to new beta is failing

[Barry4679]

The download link for MM5 v2269 is failing atm.
I can download the codec pack, but not the MM5 beta.

[Lowlander]

It worked fine last evening and it still works for me.

[dtsig]

odd ... i downloaded and installed last night .. just tried it cause really who cares about last night ... seems to be working

[Peke]

Hi,
No issues here also.

[Barry4679]

The download link is still failing for me.
Could someone PM me the download?

From https://blog.chromium.org/2020/02/prote ... ecure.html

Insecurely-downloaded files are a risk to users' security and privacy. For instance, insecurely-downloaded programs can be swapped out for malware by attackers, and eavesdroppers can read users' insecurely-downloaded bank statements. To address these risks, we plan to eventually remove support for insecure downloads in Chrome.
As a first step, we are focusing on insecure downloads started on secure pages. These cases are especially concerning because Chrome currently gives no indication to the user that their privacy and security are at risk.
Starting in Chrome 84 (to be released July 2020), Chrome will gradually start warning on, and later blocking, these mixed content downloads. File types that pose the most risk to users (e.g., executables) will be impacted first, with subsequent releases covering more file types. This gradual rollout is designed to mitigate the worst risks quickly, provide developers an opportunity to update sites, and minimize how many warnings Chrome users have to see.

I turned on Chrome Dev Tools, and see this.

[Peke]

Hi,
Are you sure that https://www.mediamonkey.com/beta/MediaM ... _Debug.exe do not work for you?

[Barry4679]

That link works from within your message in the forum. Thanks.

But it is not working from your download server from Rusty's post.

Read the blog that I quoted from. That will explain to someone what is happening.

[Lowlander]

Both are the exact same link.

[Barry4679]

Both are the exact same link.

Not sure what you are implying.

Before reporting the issue I had tried to resolve by restarting my browser, and clearing my browser cache for the MM site. Neither fixed the issue.
During (my) night several people reported that the link was functional.
I rebooted my PC again, and the problem persisted.
I captured the browser log of the failure, and reposted.

Peke sent me an independent link to the d/l within minutes ... it worked.

So my conclusion is either it was a different link, or someone (silently) fixed something at your end after looking at my log.
The blog that I posted was a heads-up from Google about a series of browser warnings, escalating to lockouts, that they are in the process of implementing into Chrome to protect against unsafe downloads. So I may be the canary at the bottom of the coal mine.

Concur?

[Peke]

Hi,
You set your browser to not accept HTTP links over HTTPS page.

What I did was to add S to HTTP so instead of Rusty Link using HTTP I send same link with added HTTPS and it worked because Digital signature of Download link is same as digital signature of Forum site.

[Barry4679]

You set your browser to not accept HTTP links over HTTPS page.

This is like trying to run in mud.
My browser setting has not changed ... it is set to "standard protection", which is the default ... ie. I have not set to any escalated protection.

This from the Google Blog post I linked to earlier

Today we’re announcing that Chrome will gradually ensure that secure (HTTPS) pages only download secure files. In a series of steps outlined below, we’ll start blocking "mixed content downloads" (non-HTTPS downloads started on secure pages). This move follows a plan we announced last year to start blocking all insecure subresources on secure pages.

This is not an area I have any expertise in, but there seems to be an issue at your end.

[Davo]

I have had the same/similar issue. I cannot download directly from the link in the MM Forum, however if i copy the link it automatically pastes into my JDownloader app & i can dowload it from there ok.

[Peke]

Hi,
Looks like Chrome is not allowing mixed links on secured page and forcing that all links on page are either Secured with https or plain http as mixed links posses security threats and can be possibly exploited.

See what my browser report even data passed in mixed page is completely safe and it also explains why https link I posted here works and why jdownloader also works:

[Peke]

Hi,
Here is same page after I changed my Forum signature to use only https for images, which makes page secure as there is no mixed context.

NOTE: Same thing applies to HTTP downloan links called from HTTPS page URL.

[Barry4679]

Hi Peke,

it looks like you have fixed it.
I don't see the warning messages shown in your image.
But I can now download 2269 (https), but am still unable to download 2268 (http)

I presume that my version of Chrome is more current that yours, which accounts for why you just see a warning message, and in my case the download is blocked ... this is exactly the staged progressive implementation that Google advised of in their blog.

Google Chrome is up to date
Version 86.0.4240.75 (Official Build) (64-bit)