I literally just need to access a link to reset my discord password but for whatever reason discords reset link always does this to me on mobile and I’m nowhere near my desktop.

Any way to bypass this on android? I’ve tried chrome and Firefox both

    • StarvingMartistOP
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 day ago

      I mean it varies from browser to browser, and it usually happens when clicking a link from emails, not during normal browsing.

      Honestly I’ve had this same issue for 3 phones now, I just assumed it was something that just happened sometimes

      Chrome

      firefox

      • catloaf@lemm.ee
        link
        fedilink
        English
        arrow-up
        9
        ·
        edit-2
        1 day ago

        Yeah that’s a security feature and it’s doing its job. If someone is trying to steal your Discord account, bypassing this error will give it to them.

        Do you have anything like a VPN that does any kind of traffic manipulation? Some custom DNS server? Can you think of anything that might be different between your mobile and desktop connections that could cause this? Are you in a country/company/ISP that interferes with its citizens’ Internet access?

        Edit: also, if you go to https://badssl.com/ and try some of the green ones, do they work or not? Especially HSTS

        • StarvingMartistOP
          link
          fedilink
          English
          arrow-up
          4
          ·
          1 day ago

          Edit: so it turns out it was actually my VPN, turns out there’s some issue with either android or Nord where if I click to disconnect from the VPN it wasn’t actually disconnecting. I had to manually remove it from VPN permissions in the android settings

            • Godnroc@lemmy.world
              link
              fedilink
              English
              arrow-up
              2
              arrow-down
              1
              ·
              1 day ago

              I think that is actually pretty common. If not, your DNS queries would need to go through your ISP and they could interpret what you are doing from them. You could manually configure DNS settings to route to a trusted source, which could address both.

              • doughless@lemmy.world
                link
                fedilink
                English
                arrow-up
                10
                ·
                1 day ago

                VPN software can easily configure your DNS settings without doing MitM trickery on websites’ certificates.

                • StarvingMartistOP
                  link
                  fedilink
                  English
                  arrow-up
                  3
                  ·
                  edit-2
                  1 day ago

                  It’s a bit above my paygrade tbh, most of the time it’s seamless and lightning fast, but times like this, or say, when I can’t port forward on my torrenting device because Nord doesn’t support that or split tunneling is ass, can be annoying when they arise.

                  Tbh as soon as my membership renews I’m finding a better VPN for my use cases, but for now it works “well enough”

          • Skull giver@popplesburger.hilciferous.nl
            link
            fedilink
            English
            arrow-up
            6
            arrow-down
            1
            ·
            1 day ago

            Two possible reasons here:

            1. Discord is blocking Nord from password reset links on a network level (probably because VPN servers are second only to Tor when it comes to malicious traffic). Frankly, I would’ve expected a CAPTCHA page instead, but it’s technically possible for an error to show up that way. You can try bypassing it by manually editing the address to make sure it starts with https.

            2. Your VPN is actively trying to sslstrip you. Aside from the whole “that’s literally a crime people go to prison for” thing, that means you cannot ever trust that VPN again. Just because Discord bothered to secure their website doesn’t mean other apps do. You may already have been hacked if that is the case.

            I’d be extremely cautious with VPN software because you’re essentially trusting them to be your ISP. If they’re doing permanent 40% off deals or (god forbid) sponsoring YouTubers, you should never trust them. It’s both funny and depressing how companies like PIA and Nord somehow convinced everyone that VPNs make your internet more secure while also not getting people to think for even a second about how much they trust these shady ass Caiman Island tax dodge scheme companies.

        • StarvingMartistOP
          link
          fedilink
          English
          arrow-up
          1
          ·
          edit-2
          1 day ago

          I have a VPN but I get the same issues disabling it. Only other thing I could guess is it might be root related? Edit: all of them work except for 10000 sans, that one I can’t click accept risk and continue

          • catloaf@lemm.ee
            link
            fedilink
            English
            arrow-up
            3
            ·
            1 day ago

            None of them should have asked you to accept risk, they should go right to the green page. Did any of them give more specific error messages?

      • PowerCore7@lemm.ee
        link
        fedilink
        English
        arrow-up
        1
        ·
        1 day ago

        Seems like the website you’re trying to access is using HSTS, which means it has told the browser “if the SSL is invalid, do not proceed”.

        If the same issue occurs across multiple devices, I would be inclined to think that there’s some problem with the website.

  • Kit@lemmy.blahaj.zone
    link
    fedilink
    English
    arrow-up
    3
    ·
    1 day ago

    Do you have a VPN installed? If so, try disabling it and make sure that the Browser Protection setting is off (sometimes this runs even when VPN is disabled)

  • TootSweet@lemmy.world
    link
    fedilink
    English
    arrow-up
    1
    ·
    1 day ago

    How old is your phone and have you been updating it? Maybe your phone is so old that the certificates on it are too old to recognize the current Discord certificate?