1591713 - "How do I tell if my connection to a website is secure?" article needs update for fx70

Status: RESOLVED FIXED

(support.mozilla.org :: Knowledge Base Content, defect)

Description

[Underpass]

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0

Steps to reproduce:

Starting in Firefox 70, when visiting a secure website I should get a green lock as it is stated in

https://support.mozilla.org/en-US/kb/how-do-i-tell-if-my-connection-is-secure

Actual results:

Visiting www.paypal.com the lock is dark grey.

Expected results:

Until Firefox 69 the lock was green.
Don't know if it is by design. In this case, we should change the article accordingly.
Otherwise, this could be a bug in the interface.
In my opinion, a green lock was more clear.

Thanks.

Comment 1

[Alice Wyman]

It seems that Firefox 70 uses a grey padlock when the page is secure.
Image: FF70 Gray Padlock
From the Mixed content blocking in Firefox article under No mixed content: secure
You’ll see a gray lock when you are on a fully secure page.

In that case, the article How do I tell if my connection to a website is secure? will need an update for fx70. I'll NeedInfo Joni.

Comment 2

[Alice Wyman]

From bug 1572675 Comment 6
Liz Henry (:lizzard) Added to the 70 release notes, " The formerly green lock icon is now grey " under a heading with a link to https://blog.mozilla.org/security/2019/10/15/improved-security-and-privacy-indicators-in-firefox-70/

Comment 3

[Joni Chan]

Lamont is working on this.

Comment 4

[Lamont Gardenhire]

Can you verify if the information below is also true in fx70 with the exception of the padlock being gray (I haven't seen any examples where the name of the company displays next to the padlock in fx70)?

A green padlock plus the name of the company or organization, also in green, means this website is using an Extended Validation (EV) certificate. An EV certificate is a special type of site certificate that requires a significantly more rigorous identity verification process than other types of certificates.

For sites using EV certificates, the Site Identity button displays both a green padlock and the legal company or organization name and location of the owner of the website, so you know who is operating it. For example, it shows that mozilla.org is owned by the Mozilla Foundation.

Comment 5

[Johann Hofmann [:johannh]]

(In reply to Lamont Gardenhire from comment #4)

Can you verify if the information below is also true in fx70 with the exception of the padlock being gray (I haven't seen any examples where the name of the company displays next to the padlock in fx70)?

A green padlock plus the name of the company or organization, also in green, means this website is using an Extended Validation (EV) certificate. An EV certificate is a special type of site certificate that requires a significantly more rigorous identity verification process than other types of certificates.

For sites using EV certificates, the Site Identity button displays both a green padlock and the legal company or organization name and location of the owner of the website, so you know who is operating it. For example, it shows that mozilla.org is owned by the Mozilla Foundation.

This is not true anymore. Since 70, the EV indicator was moved to inside the identity popup (the popup that comes up when you click on the lock icon).

Comment 6

[Alice Wyman]

Related discussion:
https://support.mozilla.org/en-US/forums/knowledge-base-articles/713726 [Fx70] Updates needed: No more Control Center or "i" icon (separate Protection, Site Information panels)

https://support.mozilla.org/en-US/kb/how-do-i-tell-if-my-connection-is-secure/discuss/8174 [Fx70] Grey padlock for secure pages ... and other needed changes

Comment 7

[Alice Wyman]

Lamont, you updated the article but some corrections are needed - see https://support.mozilla.org/en-US/kb/how-do-i-tell-if-my-connection-is-secure/discuss/8174

Comment 8

[Lamont Gardenhire]

Please review/approve the changes here: https://support.mozilla.org/en-US/kb/how-do-i-tell-if-my-connection-is-secure/history#preview.

Comment 9

[Joni Chan]

Revisions approved with edits.

Comment 10

[Alice Wyman]

I made a new revision to the article section, Gray padlock with a red strike over it, since it's also shown for HTTP sites.
Joni, can you review?

Comment 11

[Joni Chan]

Reviewed, thanks, Alice.