1217566 - Enhance untrusted connection pages with basic troubleshooting tips

Status: UNCONFIRMED

(Core :: Security, enhancement)

Description

[Trammel May]

Attachment: OnyxiaUntrusted.bmp

Actual Result:
When attempting to navigate to any website, the user is confronted with a "This Connection is Untrusted" message. They are not given the option to take the risk and continue and are only allowed to select "Get me out of here!". 

Expected Result:
The user should be able to navigate to safe websites such as youtube without this warning message. The user should also be allowed to take the risk of navigated to the desired page and ignore the warning. 

Steps to Recreate:
1. Launch Firefox Developer.
2. Try to navigate to any web site. 
3. Observe the error/warning message. Observe the only option is to "Get me out of here!"

Comment 1

[Trammel May]

Attachment: OnyxiaAboutSupport.txt

Comment 2

[Trammel May]

Attachment: OnyxiaDxDiag.txt

Comment 3

[u279076]

I think there's probably a problem with this system. You should not be getting this error on every page. Can you please try running on a new Firefox profile to see if the problem still occurs?

Comment 4

[Trammel May]

(In reply to Anthony Hughes, QA Mentor (:ashughes) from comment #3)
> I think there's probably a problem with this system. You should not be
> getting this error on every page. Can you please try running on a new
> Firefox profile to see if the problem still occurs?

Ok, So I got it working, and am about to start testing, however you may want to know this.

I tested another profile like you suggested and that didn't work. I decided to do a control experiment and see if chrome worked. Chrome did NOT work either, however chrome gave me an error message saying that it was unable to establish a secure connection because my date/time on the computer was not accurate. 

Within the error message chrome provided a button to auto-update my date/time. The button did not work, so instead I manually changed the date/time. After that, chrome worked fine, so I went into firefox and it also worked fine (pre testing of course). 

Let me know if you need any other information on this. In the mean time I will begin the actual testing.

Comment 5

[u279076]

Thanks, I'm repurposing this bug to be a feature request to enhance our security error pages with basic troubleshooting steps like Chrome.

Comment 6

[Trammel May]

I have mixed feelings on the implementation of this enhancement. On one hand it was implemented, however in contrast to Chrome, it is not as user friendly. In Chrome, the user instantly knows what the issue is via Chrome's error message. 

In firefox, the user is still presented with a "Your connection is not secure" error message and in order to understand exactly what the problem is they must click on advanced. The immediate information presented to the user is a bit misleading as it says, "The owner of ______ has configured their website improperly. To protect your information from being stolen, Firefox Developer Edition has not connected to this website." 

I think to provide the user with the best experience possible they should give given precise information concerning the nature of the issue, similar to how it is presented in Chrome. 

This however may just be my personal preference, as the enhancement has actually been implemented, this is technically fixed.