From Bugzilla Helper: User-Agent: Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.0rc1) Gecko/20020417 BuildID: 2002041711 When loading an https page that requires basic authentication, the username/password promt appears BEFORE the warning that you've "requested an encrypted page". IMO, it should be the other way around, so that you know that the password you enter will not be transferred insecurely. Furthermore, I have reproduced the behaviour that the warning message appears when loading the last frame in a frameset, even though the whole frameset (and thus the frames already displayed) is/are https-only. Unfortunately, the site I used to reproduce it requires authentication, but if necessary I can try to set up an example page somewhere else. Mhmm, this should probably be a separate bug report ... Reproducible: Always Steps to Reproduce: 1. Make sure the SSL warning "Loading a page that supports encryption" is enabled 2. Open the URL of an https site that requires basic authentication 3. Enter valid username/password Actual Results: Mozilla prompts for username/password first, then displays the warning "You have requested an encrypted page". Expected Results: Display the warning "you have requested an encrypted page" first, then ask for username/password.
->PSM He's got a good point here. This could be considered a usability issue.
Assignee: mstoltz → ssaux
Component: Security: General → Client Library
Product: Browser → PSM
QA Contact: bsharma → junruh
Version: other → 2.3
Confirming. Here is an in-house test site - https://scopus.netscape.com:5443/bugsplat/
Status: UNCONFIRMED → NEW
Ever confirmed: true
In general, the dialog requesting log in data should provide the user with feedback, whether the login information will be sent in the clear or encrypted. This is reasonable, because a user could have decided to disable security warnings.
Can we resolve this bug as a duplicate of bug 38019? I think we should separate the warning message time from the security state info in the password prompt. The fact that a security warning has been shown is not necessarily helpful to the user.
Status: NEW → RESOLVED
Last Resolved: 16 years ago
Resolution: --- → DUPLICATE
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.