358426 - Grey padlock on secure web sites not clear enough

Status: RESOLVED INVALID

(Firefox :: General, enhancement)

Description

[Erlendur S Thorsteinsson]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8.1) Gecko/20061010 Firefox/2.0
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8.1) Gecko/20061010 Firefox/2.0

I don't think that when visting secure web sites (HTTPS) that the grey padlock is clear enough.  Why not use a golden padlock?

Reproducible: Always

Comment 1

[Jo Hermans]

that's why the yellow background in the location bar was added

Comment 2

[Erlendur S Thorsteinsson]

I use both IE6 and Fx, so I look down to the status bar and expect to find a clearly visible padlock there.  In Fx2 the padlock is grey and not golden (as it was in Fx1) and I always get a momentary feeling that the site is insecure, the cert isn't valid or the content is mixed (especially due to the yellow/black stripe across it).  The golden reddish yellow padlock in Fx1 was much better than the grey padlock in Fx2.

Comment 3

[Jesse Ruderman]

I agree, especially about the "yellow and black stripes" bit.

Comment 4

[Erlendur S Thorsteinsson]

In addition, if the page has a mixed secure/insecure content then IE6 and IE7 will not show any padlock icons if you load the insecure content.  (They will only show a padlock icon if only the secure content is loaded; Fx will always load the insecure content; see bug 321022.)

In Fx2, by contrast, a locked padlock with a thin red stripe will be displayed in the address and status bars, although the address bar will not turn yellow.  This striped locked padlock can easily be mistakes for a real locked padlock on a secure site.

The red stripe was more visible on the padlock in Fx1 but it blends in with the padlock in Fx2.  However, I suggest that Fx not show any padlocks on mixed content.  Either the page is secure or it's not.

Comment 5

[Mike Beltzner [:beltzner, not reading bugmail]]

No padlock anymore, so this gets RESO INVALID.