Open Bug 1102539 Opened 5 years ago Updated Last year

Provide a more useful explanation when mixed content is blocked

Categories

(Firefox for Android :: General, defect)

35 Branch
All
Android
defect
Not set

Tracking

()

People

(Reporter: Margaret, Unassigned)

References

(Blocks 1 open bug)

Details

Right now we hide the site identity information when mixed content is loaded, since not all of the content on the page is coming from that verified domain. Looking back, we originally decided to hide this in the "mixed content blocked" case because of lco's comment here:
https://bugzilla.mozilla.org/show_bug.cgi?id=860581#c18

However, this is a kinda brute-force attempt at solving the problem. On desktop, we still show the site identity information, but we have a message explaining that some of the content on the page is not encrypted.

We should come up with a solution where we still show the site identity information, but maybe include a message saying that the page is only partially encrypted.
Actually, we really won't have identity data to show if mixed content is loaded since the security state will be STATE_IS_BROKEN.

To fix this bug, we'll probably need to update the site_identity_unknown layout to account for *why* the identity is known.

For some details on how desktop deals with this, see this:
http://mxr.mozilla.org/mozilla-central/source/browser/base/content/browser.js#6866
http://mxr.mozilla.org/mozilla-central/source/browser/base/content/browser.js#6682
No longer depends on: 1095643
Depends on: 1177576
You need to log in before you can comment on or make changes to this bug.