Closed Bug 1552650 Opened 6 years ago Closed 6 years ago

Secure connection "verified by" has become difficult to find

Categories

(Firefox :: Site Identity, defect)

Product:
Firefox
Component:
Site Identity
Version:
66 Branch
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED WONTFIX

People

(Reporter: jimis, Unassigned)

Details

User Agent: Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0

Steps to reproduce:

  1. Visit a website under HTTPS
  2. Click on the green padlock on the left side of the address box

You see "secure connecection" with no further info. In the past you used to see "Verified by Digicert" together, but I am not sure when it changed.

Today you have to click on a small hard-to-click arrow on the right, just to get a tiny bit of extra information, which IMO is precious for experienced users. For example, if you visit a country and you see a green padlock saying "verified by Country National CA" while visiting google.com, then something is definitely fishy.

Can you please return the small but important text "Verified by: XX CA" to the first level?

hovering over the padlock icon would also provide this kind of information

Nice, I never noticed! Maybe because the hovering area (just the padlock) is much smaller than the clickable area (the whole info box) and it's hard to be precise with a touchpad.

Component: Untriaged → Security

We will make this area easier to click in the future but I don't think we plan to show the verifier in the first panel of the identity popup.

Status: UNCONFIRMED → RESOLVED
Closed: 6 years ago
Component: Security → Site Identity and Permission Panels
Resolution: --- → WONTFIX

We will make this area easier to click in the future

Great! Two things here:

  • First the whole "connection \n secure connection" together with the arrow on the right could be clickable as a whole, instead of only the arrow.
  • Second, hovering over the whole info area could show the verifier, not only the green padlock. It is unintuitive as it is now as clicking anywhere on the info area performs the same action (opening the "site information" pull down).

I don't think we plan to show the verifier in the first panel of the identity popup

Why not?

Today when I click on the info area with the green padlock, I see two lines: "Connection \n Secure Connection". One of them is redundant. Why not just show "Secure Connection \n Verified by X" ?

Can we leave this ticket open until there is resolution in any way, so that I track the issue?

You need to log in before you can comment on or make changes to this bug.