1058306 - STS error message needs to become understandable

Status: RESOLVED DUPLICATE of bug 800882

(Firefox :: Untriaged, defect)

Description

[Nils Ohlmeier [:drno]]

Attachment: Screen Shot 2014-08-25 at 1.12.06 PM.png

If you visited a HTTPS web site before which used the Strict-Transport-Security headers to require HTTPS access to the site in the future, but on revisiting the site Firefox receives a certificate which does not match the site you get the attached error message.

Several engineers in the Mozilla office failed to understand what the problem was in this situation.

1) Right now I can't even look at the cert which is causing the problem, which makes debugging the problem really hard!
2) As Firefox remembers that the page has been visited before and requested STS the error message should include some text indicating something like that: 
"You have visited this site over a securely and trusted connection before with this browser, but right now this connection can not be trusted any more."

Comment 1

[Dana Keeler (she/her) (use needinfo) [:keeler]]

Thanks, Nils. We're pretty close to fixing this, actually :)