184659 - Add user dialog to processing of application/x-x509-email-cert

Status: RESOLVED DUPLICATE of bug 249004

(Core Graveyard :: Security: UI, enhancement, P3)

Description

[Ralf Hauser]

click on the above URL nothing visible happens.

I assume that the certificate is imported, but for me as a user, it would be
helpful if
1) It would be displayed what the certificate is about (purpose, issued to,
validity, etc.).
2) to which tab of my security manager (Your certificates, Other people's,
Websites, Authorities)
3) Provide me with the options (Import - Save As - Cancel)

Comment 1

[John Unruh]

FYI: When you click on the link, Ralf's cert is added to the "Other People's" tab.

Comment 2

[Kai Engert [:KaiE:]]

I suggest to duplicate this bug against the other bug, that suggests giving
feedback when importing a user cert.

Comment 3

[Ralf Hauser]

I guess just declaring this bug a simple duplicate of
http://bugzilla.mozilla.org/show_bug.cgi?id=184662 is not appropriate since it
is after all a different mime-type and I am sure the original (Netscape?)
designers who chose not just to go with application/pkix-cert for all 3 cases
did that for some purpose beyond being different from Microsoft. But yes the two
bugs or even three (if we also take
http://bugzilla.mozilla.org/show_bug.cgi?id=184663 for the CAs) could be merged
to one big-bug.

Comment 4

[Nelson Bolyard (seldom reads bugmail)]

Here is some background information about this enhancement request.

Netscape Communicator 4.x behaves as the submittor suggests.  It takes 
the user through a "wizard" that led the user through the steps of deciding
what to do with the cert.  

That was perceived as a big usability problem.  People complained a lot 
about having to click so many times to get through the wizard.  It was
perceived by (then, paying) customers as an impediment to deployment of
certs.  So, it was specifically removed for mozilla.  The idea was that
a web site can be constructed so that it downloads a cert _AND_ displays
a page that tells the user what has just been downloaded.  Netscape's 
CA software product does that, for example.

Personally, I agree that the user should have more information and control
over the download of certs, so this RFE is OK with me.  This is one reason
I continue to use C4.x.

Comment 5

[John G. Myers]

Mass reassign ssaux bugs to nobody

Comment 6

[Ralf Hauser]

*** This bug has been marked as a duplicate of 249004 ***