"Dangerous" red notice shown on Chrome browser of user trying to join self-hosted Jitsi meeting reddit / selfhosted ---------------------------------------------------------------------- legrenabeach · 2023-10-05 22:11 A friend tried to join a Jitsi meet running on my own Jitsi server today, and he was getting a red notice on his Chrome browser warning him the site is dangerous, phishing, could steal your data etc. Eventually he skipped it and joined, but I found it really weird. I looked up my domain and it's not on any blacklist. Neither myself nor other users have ever seen this (I had another call after that and the other person never saw anything like that). The user in question was using AdBlock Plus. He tried turning it off but the notice kept appearing. Has thus happened to anyone? What could cause this? ---------------------------------------------------------------------- EndlessHiway · 2023-10-05 22:30 You can click up in the address bar where it says unsafe, and change it to safe. It happens in chrome if the site doesn't have SSL activated. ---------------------------------------------------------------------- legrenabeach · 2023-10-06 00:01 My Jitsi is correctly set up with a certificate and comes up as secured (TLS/padlock) from all my browsers, and apparently from everyone else's browsers except that one person. He showed me a screenshot and I couldn't see a switch in there to switch it to safe. It did say the site had a certificate, and he clicked it for me and it listed my certificate details just fine, so I don't think it's that. ---------------------------------------------------------------------- Sure-Temperature · 2023-10-06 00:06 There was a notice I saw on some discord yesterday that some FiOS and maybe Xfinity/Comcast customers had some McAfee protection force- enabled on their modem, which was causing these false warnings ---------------------------------------------------------------------- legrenabeach · 2023-10-06 00:09 Interesting, can this be forced from the ISP / DNS provider? We are in the UK, but still this is a good hint, thanks. ---------------------------------------------------------------------- hucknz · 2023-10-06 00:16 Google use their own lists (as well as others) to flag sites so, if you haven't already, it's important to [check their list](https://transparencyreport.google.com/safe-browsing/search) as well as the usual blacklists. If the site issue is one that's specific to Chrome that safe browsing check should show you what the problem is. If it's not in there then it could be something like an AV/anti-malware program alert. ---------------------------------------------------------------------- Sure-Temperature · 2023-10-06 00:21 As far as I know, it was enabled automatically, without any user input. But I'm not 100% sure since I'm not in that discord anymore and it didn't happen to me ---------------------------------------------------------------------- Anticept · 2023-10-06 00:28 Could be they havent updated chrome in a long time. ---------------------------------------------------------------------- MeudA67 · 2023-10-06 00:46 See my comment to someone else's similar question a couple of days ago: https://reddit.com/r/selfhosted/s/rv70VIha7e ---------------------------------------------------------------------- ball_soup · 2023-10-06 01:07 Does your site have proper certificates? ---------------------------------------------------------------------- legrenabeach · 2023-10-06 06:34 Thanks, I had not checked that list, but I'm not in it either. I'll see what it does for him next time we meet and check what sort of antimalware he is using. ---------------------------------------------------------------------- legrenabeach · 2023-10-06 07:26 Yes, Let's Encrypt certificate via certbot, and it is in date. ---------------------------------------------------------------------- Apart_Ad_5993 · 2023-10-06 12:21 Did the warning appear in any other browsers like Firefox or Edge? ---------------------------------------------------------------------- legrenabeach · 2023-10-06 13:32 At the time we just wanted to get on with the task at hand so there was no opportunity to ask him to open other browsers unfortunately. But everyone else I've ever had on a Jitsi call, including a person right after the affected one, didn't have this issue, nor do I on multiple laptops with Firefox or Chrome. I know that when it comes down to it it's just one person and it will most likely be some silly reason, but I really want to look into it as it is potentially reputation-damaging (I set the tone but establishing my self-hosted system as the videoconference system of choice and then he sees 'Dangerous', not exactly inspiring confidence in whatever else I say!).