76867 - All SSL warning prefs not turned on by default

Status: VERIFIED FIXED

(Core Graveyard :: Security: UI, defect)

Description

[John Unruh]

1.) Edit > Prefs > Privacy > SSL
What happens: Not all prefs are on by default, and the form submit pref is 
greyed out.

Comment 1

[Bob Lord]

John, are you trying this on a default profile?  

Which options are not on?

Also, the form submit pref is supposed to be grayed out, but it should be
checked, not unchecked.  So that clearly needs to get fixed.

Comment 2

[John Unruh]

With a new profile, these prefs are off by default and should be on.
1.) Redirection from one secure site to another.
2.) Redirection from a secure site to an insecure site.
3.) Also, the form submit pref is greyed out and not checked.

Comment 3

[John G. Myers]

Form submit insecure from secure pref is being removed per bug 50168.

I disagree that all prefs should be turned on by default.  "Entering a site that 
supports encryption" should in its present form be off by default.  "Redirection 
from one secure site to another" should also be off by default.

Comment 4

[John Unruh]

Marking fixed. jgmyers, please open a new RFE bug concerning "Entering a site 
that supports encryption should in its present form be off by default".

Comment 5

[John Unruh]

Verified.