1644146 - Change HTTPS Only Mode error copy to give the sense of "protection"

Status: VERIFIED FIXED

(Core :: DOM: Security, enhancement, P2)

Description

[Arthur Edelstein [:arthur]]

Attachment: Rough idea (not a final design)

We got some feedback that the HTTPS Only Mode error page can look scary. Can we revise the copy to make it very concise, and give users the sense that "Firefox is Protecting You"? See attached image as one idea for how this might look.

Comment 1

[.]

The strings in https://hg.mozilla.org/mozilla-central/rev/ae277f656dc4#l28.3 look alright to me, but they do seem pretty verbose. I have noticed that similar error messages displayed for badssl . com pages have a "What can you do about it?" subsection or bullet points that allows the immediate subtext to be short without losing the additional explanation.

If the mockup is being considered, I think the title text could use some copy-editing since it gives me the "x is Watching You" vibes. Otherwise, I think the shortening of the subtext is a good start.

Comment 2

[Christoph Kerschbaumer [:ckerschb]]

Attachment: firefox_is_protecting_you.png

I think this is what we were shooting for, but I am happy to update the text if we get to a conclusion.

Comment 3

[Christoph Kerschbaumer [:ckerschb]]

Attachment: Bug 1644146: Change HTTPS Only Mode error copy to give the sense of protection

Comment 4

[Christoph Kerschbaumer [:ckerschb]]

Arthur, the patch is ready to review and I think what we want. Can you help me get signoff on the string updates? Once approved, we could get it reviewed and landed. Thanks!

Comment 5

[Meridel [:meridel]]

Please see notes and questions, as well as a draft revision on the final page of the doc: https://docs.google.com/document/d/1ujx32a9dzlWxGHBNRMBKSaM9S92aKPVygm7M4ukYDEs/edit#bookmark=id.vc9yzcacmt3s

Comment 6

[Meridel [:meridel]]

This message copy has been revised. Before I send it to legal, please take a look and flag any l10n concerns. Thank you! https://docs.google.com/document/d/1ujx32a9dzlWxGHBNRMBKSaM9S92aKPVygm7M4ukYDEs/edit#bookmark=id.v6j0j3khqdqp

Comment 7

[Francesco Lodolo [:flod]]

No concerns on the content, but mostly on the length of the main button's label (Accept the Risk and Continue to Site). I'd like to make sure the layout works if the translated text is significantly longer than English.

Comment 8

[Christoph Kerschbaumer [:ckerschb]]

Attachment: firefox_detected_security_issue.png

This is how it will look like in the end.

Comment 9

[Meridel [:meridel]]

We use that same button copy on our Certificate messages so it should be okay? https://badssl.com/

Comment 10

[Meridel [:meridel]]

(In reply to Christoph Kerschbaumer [:ckerschb] from comment #8)

Created attachment 9158310 [details]
firefox_detected_security_issue.png

This is how it will look like in the end.

-"What could be causing this?" should be bolded.
-Can we also move it down one line to associate it with the bullet points (and dissociate it from the opening line)?

Thank you!

Comment 11

[Francesco Lodolo [:flod]]

(In reply to Meridel from comment #9)

We use that same button copy on our Certificate messages so it should be okay? https://badssl.com/

That's only Accept the Risk and Continue, isn't it?

Having said that, I realize we already have translations, so you can take a look at Dutch for example (+35%)
https://transvision.flod.org/string/?entity=toolkit/toolkit/about/aboutHttpsOnlyError.ftl:about-httpsonly-button-make-exception&repo=gecko_strings

Again, that's more a layout concern than content (unless layout can't do anything about it). If everyone is fine with a very long button on one line, I'm OK with it.

Comment 12

[Christoph Kerschbaumer [:ckerschb]]

(In reply to Meridel from comment #10)

-"What could be causing this?" should be bolded.
-Can we also move it down one line to associate it with the bullet points (and dissociate it from the opening line)?

Sure.

(In reply to Francesco Lodolo [:flod] from comment #11)

That's only Accept the Risk and Continue, isn't it?

Yeah, that makes sense to me actually - thanks!

Comment 13

[.]

I think the mock-up in comment #8 looks pretty good!

I like how the top bullet point covers the most common scenario, while the less-likely one is explained in the bottom bullet point. It's a small change, and I think users will appreciate the implied distinction between the two cases.

Apologies for the ping. I will keep content like comment #1 and comment #13 in the forums next time.

Comment 14

[Meridel [:meridel]]

Can we plug the Dutch version of "Accept the Risk and Continue to Site" into the design and see how this looks?

Comment 15

[Julian Gaibler]

Attachment: firefox_detected_security_issue_dutch.jpg

^^

Comment 16

[Meridel [:meridel]]

Thank you. I don't like how the button breaks to two lines on mobile. Let's shorten the button copy to: Accept the Risk and Continue

Can you please try this new copy in Dutch so I can see if the button on mobile looks okay? Thank you.

Comment 17

[Julian Gaibler]

Attachment: firefox_detected_security_issue_less_dutch.jpg

(I pulled the translation from Pontoon Machinery)

Comment 18

[Julian Gaibler]

I just noticed the current version of the patch already has "Accept the Risk and Continue", so I think we can just keep it like that.

Comment 19

[Meridel [:meridel]]

Ah right, thank you. Michael, this error message copy has been updated. I don't think any of the changes have legal implications but flagging for you just in case: https://docs.google.com/document/d/1ujx32a9dzlWxGHBNRMBKSaM9S92aKPVygm7M4ukYDEs/edit#bookmark=id.v6j0j3khqdqp

Thank you!

Comment 20

[Christoph Kerschbaumer [:ckerschb]]

Attachment: ff_https_error_page_finalp.png

FWIW, this is how the final error page would look in production!

Comment 21

[Meridel [:meridel]]

Looks good, thank you!

Comment 22

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/c803fcd7d09d
Change HTTPS Only Mode error copy to give the sense of protection r=flod,JulianWels

Comment 23

[Noemi Erli[:noemi_erli]]

https://hg.mozilla.org/mozilla-central/rev/c803fcd7d09d

Comment 24

[Andrei Purice]

Verified fixed on Firefox beta 79.0b2 (20200630191632) and Nightly 80.0a1 (2020-07-01) (20200701093012) on Windows 10 and Ubuntu 18.04.4.