I think chrome is intentionally providing shitty user experience for the blocking of HTTP downloads on HTTPS pages, in order to push developers to fix it faster.

you click a HTTP download link on an HTTPS page and what happens? NOTHING. No error page, no pop-up saying "BLOCKED BECAUSE SECURITY", the browser is just like "did you click? I didn't notice"
it just sticks an error in the JS console.

which I'm sure everyone notices
BTW, this is probably going to get fixed soon, but as of Version 87.0.4280.141 (which seems to be latest) there's a bug which lets you bypass the block, most of the time.

Incognito mode.
Basically chrome won't let you download it because it has the context of you clicking it from a HTTPS page.
But it loses the context if you use the "open link in incognito window" option.
The only reason this wouldn't work is if you're in incognito mode already.
Annoyingly there's only one incognito mode, you can't have incognito mode from other incognito modes.
I demand internal security between my browser windows. none of them should know about each other!
anyway it turns out this trick isn't needed after all.
You can do "save link as", it'll let you select where to save it, then it'll fail.
but it fails in a bypassable way
so you should probably do it this way, as it's less likely to be patched out soon by an angry google dev
I understand that google wants to build a more secure web but a side effect of the everything they're doing is that the web is bitrotting faster
dev1: if we change X to Y, the web will be 2% more secure
dev2: won't that break pages not made in the last 2 years?
dev1: yes. legacy pages will stop working
dev2: how will we support the old pages?
dev1: let me say this as clearly as I can
*puts mouth on the mic* FUCK THEM
chrome.exe

More from foone

More from Tech

You May Also Like

So the cryptocurrency industry has basically two products, one which is relatively benign and doesn't have product market fit, and one which is malignant and does. The industry has a weird superposition of understanding this fact and (strategically?) not understanding it.


The benign product is sovereign programmable money, which is historically a niche interest of folks with a relatively clustered set of beliefs about the state, the literary merit of Snow Crash, and the utility of gold to the modern economy.

This product has narrow appeal and, accordingly, is worth about as much as everything else on a 486 sitting in someone's basement is worth.

The other product is investment scams, which have approximately the best product market fit of anything produced by humans. In no age, in no country, in no city, at no level of sophistication do people consistently say "Actually I would prefer not to get money for nothing."

This product needs the exchanges like they need oxygen, because the value of it is directly tied to having payment rails to move real currency into the ecosystem and some jurisdictional and regulatory legerdemain to stay one step ahead of the banhammer.