Closed Bug 1502952 Opened 7 years ago Closed 7 years ago

Revoked certificates are showing as secure in both Fennec and GV

Categories

(GeckoView :: General, defect)

Product:
GeckoView
Component:
General
Version:
53 Branch
Platform:
All
Android
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

(firefox63- wontfix, firefox64- wontfix, firefox65- wontfix)

Status:
RESOLVED DUPLICATE of bug 1479064
Tracking Flags:
Tracking Status
firefox63 - wontfix
firefox64 - wontfix
firefox65 - wontfix

People

(Reporter: droeh, Assigned: droeh)

Details

A revoked certificate (eg: https://revoked.badssl.com/ ) should show a cert warning page as it does on desktop; instead, in Fennec, the page loads and even shows a secure connection icon. Likewise, GeckoView's onSecurityChange will consider the site secure.
This is likely an issue we should escalate or even include in a 63 dot release if it affects the current release.
status-firefox63: --- → ?
status-firefox64: --- → ?
status-firefox65: --- → affected
tracking-firefox63: --- → ?
tracking-firefox65: --- → +
Nope, turns out this is a deliberate decision I was unaware of! See bug 1479064.
Status: NEW → RESOLVED
Closed: 7 years ago
Resolution: --- → DUPLICATE
Not tracking for 63 as this is a dupe of a bug marked as Wontfix.
tracking-firefox63: ? → -
Product: Firefox for Android → GeckoView
You need to log in before you can comment on or make changes to this bug.