143418 - security warning pops up every time

Status: RESOLVED DUPLICATE of bug 63095

(Core :: Security, defect)

Description

[Adam Caban]

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.0rc1) Gecko/20020417
BuildID:    20022041711

When I'm on a unsecure site (HTTP/80) and a fill out a form that will be send to
a secure (HTTPS/443) site I allways get the SECURITY WARNING POP UP but the data
is send encrypted over the network. 

This seems to be a bug.

The Opera and IE don't do this.


Reproducible: Always
Steps to Reproduce:
1. create a simple USER/PASSWORD enter form with a action url to a HTTPS destination
2. click the submit button

Actual Results:  a security warning message pops up

Expected Results:  no warning because the data will be send encrypted over the
network. I think this confuse the user.

Comment 1

[Boris Zbarsky [:bzbarsky]]

The point is that if you are on an insecure site the entire page could have been
faked.  Thus the data is being sent securely, but to an unknown location (which
is insecure -- you have no idea where your data is going). Essentially, Opera
and IE give you a false sense of security here.

Duplicate of 'Submitting form with https action from http page brings up a "the
information you submit is insecure" dialog'.  That bug has more discussion of
the issue.

*** This bug has been marked as a duplicate of 63095 ***