# Windows XP Google Chrome unable to get avatar from avatars.discourse.org

**URL:** <https://meta.discourse.org/t/windows-xp-google-chrome-unable-to-get-avatar-from-avatars-discourse-org/34268>\
**Category:** Bug\
**Created:** [2015年十月8日 14:31 UTC](https://meta.discourse.org/t/windows-xp-google-chrome-unable-to-get-avatar-from-avatars-discourse-org/34268 "2015-10-08T14:31:53Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![adopilot](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/adopilot/32/105040_2.png) [@adopilot](https://meta.discourse.org/u/adopilot)\
**Post date:** [2015年十月8日 14:31 UTC](https://meta.discourse.org/t/windows-xp-google-chrome-unable-to-get-avatar-from-avatars-discourse-org/34268/1 "2015-10-08T14:31:53Z")

</div>

Our forum is on standard docker update.  
We using letters avatar whit default values for external system avatars url

```
https://avatars.discourse.org/letter/{first_letter}/{color}/{size}.png

```

Since we updated to 1.5.0.beta2 users on WinXP using Google chrome start compaling that they can’t see avatars icons anymore. (Before version 1.5 it worked OK)

Here is what we get on Widonws XP Google Chrome 45.0.2454.101 m (is up to date) when open any discource

 ![](https://global.discourse-cdn.com/meta/original/3X/f/0/f02a5d374b4cdc5865d11f27228c1ff017ccaf6e.png)

When we call avatar ul we get error like this

 ![](https://global.discourse-cdn.com/meta/original/3X/3/e/3e97a693641ddefad8975a66aa94125f135d95d7.png)

We clound not reproduce this on FireFox

---

<div class="post-metadata">

**Author:** ![gerhard](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/gerhard/32/119479_2.png) [@gerhard](https://meta.discourse.org/u/gerhard)\
**Post date:** [2015年十月8日 15:08 UTC](https://meta.discourse.org/t/windows-xp-google-chrome-unable-to-get-avatar-from-avatars-discourse-org/34268/2 "2015-10-08T15:08:55Z")

</div>

Windows XP isn’t supported anymore (unless you pay lots of 💰 to Microsoft). Either use Firefox, since it’s the only browser that doesn’t rely on the OS as much as the others do, or switch to a newer OS. If you stay with Windows XP you’ll start to see such problems more and more.

And here’s why you get that error. [avatars.discourse.org](http://avatars.discourse.org) uses Cloudflare:

> According to Symantec’s ECC PDF written on May 2013, WinXP IE as well as Chrome do not support ECC 256 bit. For WinXP only Firefox 19+ work with ECC 256 bit SSL certificates. Which would explain why, WinXP SP3 + Chrome 37 didn’t work with Cloudflare Universal SSL with ECC 256 bit ECDSA.

Quote from [https://community.centminmod.com/threads/cloudflare-universal-ssl-incompatible-with-winxp-internet-explorer-8-browsers.1577/](https://community.centminmod.com/threads/cloudflare-universal-ssl-incompatible-with-winxp-internet-explorer-8-browsers.1577/)

---

<div class="post-metadata">

**Author:** ![adopilot](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/adopilot/32/105040_2.png) [@adopilot](https://meta.discourse.org/u/adopilot)\
**Post date:** [2015年十月8日 15:38 UTC](https://meta.discourse.org/t/windows-xp-google-chrome-unable-to-get-avatar-from-avatars-discourse-org/34268/3 "2015-10-08T15:38:54Z")

</div>

another work around is to delete S from:

```
https://avatars.discourse.org/letter/{first_letter}/{color}/{size}.png

```

Looks like [avatars.discourse.org](http://avatars.discourse.org) is avaible whitout SSL using only HTTP protocol.

_I apologize for the inconvenience due to spamming BUG category._  
_The solution that came to mind when I asked the question_

---

<div class="post-metadata">

**Author:** ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)\
**Post date:** [2015年十月8日 20:33 UTC](https://meta.discourse.org/t/windows-xp-google-chrome-unable-to-get-avatar-from-avatars-discourse-org/34268/4 "2015-10-08T20:33:50Z")

</div>

We can see if we can buy a cert that supports older browsers for avatars

---

<div class="post-metadata">

**Author:** ![mpalmer](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mpalmer/32/45740_2.png) [@mpalmer](https://meta.discourse.org/u/mpalmer)\
**Post date:** [2015年十月8日 21:54 UTC](https://meta.discourse.org/t/windows-xp-google-chrome-unable-to-get-avatar-from-avatars-discourse-org/34268/5 "2015-10-08T21:54:13Z")

</div>

> [@adopilot](#):
>
> another work around is to delete S from:
> 
> ```
> https://avatars.discourse.org/letter/{first_letter}/{color}/{size}.png
> 
> ```

That will work if you never serve pages on your own site via HTTPS. Otherwise, you’ll get mixed content warnings.

> [@sam](#):
>
> We can see if we can buy a cert that supports older browsers for avatars

It’s not (just) a certificate-level problem; the proximate issue (that Chrome is reporting in the screenshot above) is that WinXP only supports ye olde _ciphers_ (how the data is encrypted/authenticated in transit) and Cloudflare isn’t supporting that (on our current plan, at least). Getting a compatible certificate might also be needed, but it won’t be enough to solve this problem.

---

<div class="post-metadata">

**Author:** ![Falco](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/falco/32/179432_2.png) [@Falco](https://meta.discourse.org/u/Falco)\
**Post date:** [2015年十月8日 23:57 UTC](https://meta.discourse.org/t/windows-xp-google-chrome-unable-to-get-avatar-from-avatars-discourse-org/34268/6 "2015-10-08T23:57:59Z")

</div>

Proxying avatar requests through your nginx instance will work.

If your discourse nginx already trade security for Chrome@XP compatibility, by using http or old cyphers, use the open PR by @mpalmer to proxy.

However you can’t expect support on secure instances like here on meta.

---

<div class="post-metadata">

**Author:** ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)\
**Post date:** [2015年十月9日 04:32 UTC](https://meta.discourse.org/t/windows-xp-google-chrome-unable-to-get-avatar-from-avatars-discourse-org/34268/8 "2015-10-09T04:32:22Z")

</div>

We plan to upload a different cert into our CloudFlare account to solve this.

---

<div class="post-metadata">

**Author:** ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)\
**Post date:** [2016年一月20日 09:15 UTC](https://meta.discourse.org/t/windows-xp-google-chrome-unable-to-get-avatar-from-avatars-discourse-org/34268/9 "2016-01-20T09:15:04Z")

</div>


