172352 - Display for level of secure transmission needed

Status: RESOLVED FIXED

(Camino Graveyard :: General, enhancement)

Description

[Michael Ulrich]

When using Chimera for Internet Banking, I'd like to see how high the encryption
level is (64bit? 128bit?). An icon currently indicates that the line is
encrypted, but it's not possible to find out the encryption level. For worried
people like me, such an addition would make us feel more at ease.

I suggest that the secure icon be clickable and an information window appears.

Comment 1

[Greg K.]

Confirming as an RFE. At least, some pertinent information could be displayed in
a tooltip on the security icon.

Comment 2

[Mike Pinkerton (not reading bugmail)]

maybe as a tooltip, yeah.

Comment 3

[Bruce Davidson]

Note that the padlock icon is now displayed in two places, once in the URL bar
and once on the status bar. I believe the intention is to make the URL bar the
"primary" one, and eventually to retire the one on the status bar. This tooltip
therefore needs to be for the one in the URL bar, or both.

The question of what information to include is an interesting one. Personally I
don't think the certificate authority is a very useful information, except
perhaps in the case where its not one signed by one our built in root CAs.
Similarly the encryption level isn't (in the real world) that useful, but I
admit people have been taught "128-bits good", everything else bad so we could
display it.

The most useful information is probably the site's URL as given in the
certificate. How about text of the form: "Connection to www.mybank.com using 128
bit encryption"?

Comment 4

[Smokey Ardisson (offline for a while; not following bugs - do not email)]

*** Bug 180173 has been marked as a duplicate of this bug. ***

Comment 5

[Samuel Sidler (old account; do not CC)]

Should this be dependent on our support for certificates? If we show
certificates, we may get this as a bonus.

Comment 6

[Mike Pinkerton (not reading bugmail)]

there's discussion about this topic from MF, we should stay involved. note that
what's there now has been improved upon greatly from discussion on the security
list, but it's still not that great of a plan.

http://www.gerv.net/security/improving-authentication/

Comment 7

[Samuel Sidler (old account; do not CC)]

I think this bug can be considered fixed with the implementation of Page Info and access to it from the security icon in the location bar.

Simon, Mike?

Comment 8

[Chris Lawson (gone)]

(In reply to comment #7)
> I think this bug can be considered fixed with the implementation of Page Info
> and access to it from the security icon in the location bar.
> 
> Simon, Mike?

Agreed. Now if one of the people who matters would just comment ;)

cl

Comment 9

[Mike Pinkerton (not reading bugmail)]

yeah, page info is good enough, please to be closing this.

Comment 10

[Samuel Sidler (old account; do not CC)]

This was fixed with the checkin for page info.