1675744 - Address bar popup menu still suggests http:// in HTTPS-only mode

Status: NEW

(Firefox :: Address Bar, defect, P3)

Description

[abandoned account]

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0

Steps to reproduce:

1. Enable HTTPS-only mode
2. Type example.com in address bar

Actual results:

Two hint were displayed.
One is to search "example.com" in search engine.
Another one is to go to "http://example.com"

Expected results:

Second hint should be "https://example.com"

Comment 1

[Florencia Di Ciocco, NI to vbalducci]

Hi,

Thanks for the details. I was able to reproduce the bug on Ubuntu 18 on the following versions:

83.0b10 (64-bit) (Argentinian locale) and Nightly 84.0a1 (2020-11-10) (64-Bit) (German and EN-US locale).

Comment 2

[Marco Bonardo [:mak]]

there's no way for the urlbar to know if the secure version exist, on the other side https-only-mode is under development and can be tested, see bug 1613063.

Comment 3

[Nandakumar Edamana]

Showing "https" for new suggestions should be okay. Shouldn't be done with suggestions from the history. What if one wants to copy a previously visited URL instead of revisiting? The result will be misleading if the site doesn't support HTTPS.

Comment 4

[Malte Jürgens [:maltejur]]

This is now partially resolved with Bug 1876513, where we do not display the http:// scheme anymore if the user also didn't type any scheme into the address bar. Cases where there is still a explicit http:// scheme entered in the address bar still need to be handled though for HTTPS-Only.