1249124 - firefox incorrectly assumes page is secure, while chrome says it's not secure

Status: RESOLVED DUPLICATE of bug 1183718

(Core :: Security: PSM, defect)

Description

[bransoj]

Attachment: Screenshot_2016-02-17_16-40-04.png

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:44.0) Gecko/20100101 Firefox/44.0
Build ID: 20160208220956

Steps to reproduce:

I went to careers.hollisterco.com.


Actual results:

The top left corner of my browser displayed a green lock icon, indicating that the site was a secure site.


Expected results:

Firefox should have indicated that my connection to the site was using an outdated cipher.  When chromium views careers.hollisterco.com, it indicates that the site is using "weak security certificate (SHA-1 signatures), so your connection may not be private.  I am using an Arch Linux machine with the Firefox version 44.0.1.  Also,  I just emailed HR at Hollister.com about the issue, so they may fix it before a developer fixes this bug.

Comment 1

[Dana Keeler (she/her) (use needinfo) [:keeler] (on leave)]

Thanks for filing the bug. This would be dealt with by bug 1183718 or similar.