Closed Bug 1756609 Opened 2 years ago Closed 2 years ago

Remove obsolete security.secure_connection_icon_color_gray pref

Categories

(Firefox :: Site Identity, task, P3)

task

Tracking

()

RESOLVED FIXED
100 Branch
Tracking Status
firefox100 --- fixed

People

(Reporter: pbz, Assigned: pbz)

Details

Attachments

(1 file)

There is leftover code for it but the pref isn't consumed anymore.
See https://searchfox.org/mozilla-central/search?path=&q=security.secure_connection_icon_color_gray

Edit: Correction, this is actually still working. However, we can still remove it since we don't ship with the green lock icon anymore.

Assignee: nobody → pbz
Status: NEW → ASSIGNED
Pushed by pzuhlcke@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/20c4f3149fb1
Remove security.secure_connection_icon_color_gray pref. r=prathiksha
Status: ASSIGNED → RESOLVED
Closed: 2 years ago
Resolution: --- → FIXED
Target Milestone: --- → 100 Branch

What is the reasoning for not shipping the green lock anymore?

Users caring about security/privacy liked the feature.
https://privacy-handbuch.de/handbuch_21l1.htm (in German)
https://www.reddit.com/r/firefox/comments/uhqt6p/changing_securitysecure_connection_icon_color/

I wasn't personally involved in the decision process for this UI change. However I can think of two arguments here:

  1. Having a positive indicator like a green lock icon can be problematic, since users might mistake the lock as "this site is trustworthy", but in reality the lock only indicates intact transport encryption, not more. That means you want to be careful with positive security indicators. I think ideally we would only use negative indicators here, like the crossed out lock or a "not secure label", when there is a problem with the connection or the site uses plain HTTP. This is especially relevant now that HTTPS is widely adopted and plain HTTP sites are less popular.
  2. A monochrome lock icon fits better with the current Firefox design.

While it's not officially supported, If you need the green lock back you can try to create your own userChrome.css which allows you to change styles for the Firefox chrome UI.

You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: