Open Bug 1868167 Opened 8 months ago Updated 1 month ago

The page can not be reached due to it not being secured at nih.gov

Categories

(Web Compatibility :: Site Reports, defect, P1)

Firefox 122

Tracking

(Not tracked)

People

(Reporter: rbucata, Unassigned)

References

(Depends on 1 open bug, )

Details

(Keywords: webcompat:needs-diagnosis)

User Story

platform:android
impact:site-broken
configuration:general
affects:all
diagnosis-team: Networking

Attachments

(1 file)

Environment:
Operating system: Android 12
Firefox version: Firefox Nightly 122.0a1 (2015989607-🦎122.0a1-20231203092644🦎)

Preconditions:
Clean profile

Steps to reproduce:

  1. Navigate to : http://nih.gov/
  2. Observe the result.

Expected Behavior:
The page loads

Actual Behavior:
An error message is thrown

Notes:

  • Reproducible regardless of the status of ETP
  • Reproducible on the latest build of Firefox Nightly and Release
  • Works as expected using Chrome
  • Screenshot attached
  • Issue found during WebCompat team [Top100] websites testing
Attached image Screenshot_3.png

Verified this issue and still reproduces on Firefox 123 and 125.

Tested with:

Browser / Version: Firefox Release 123.0 (2016003223-🦎123.0-20240212203859🦎)/ Firefox Nightly 125.0a1 (2016005159-🦎125.0a1-20240222103314🦎)/ Firefox Beta 123.0b9 (2016002567-🦎123.0-20240209102425🦎)/ Chrome Mobile Version 121.0.6167.180/
Operating System: Google Pixel 3 (Android 12) -1080 x 2160 pixels, 18:9 ratio (~443 ppi density)
Operating System: Oppo Find X5 (Android 13) - 1080 x 2400 pixels, 20:9 ratio (~402 ppi density)

Severity: -- → S2
Priority: P3 → P1
Component: Mobile → Site Reports

It seems to be a redirect problem when trying to access "nih.gov" or "http://nih.gov". On Chrome when accessing "nih.gov" it redirects to "https://www.nih.gov".

Note: Accessing https://www.nih.gov directly, loads the page as expected

Environment:
Operating system: OnePlus 6 A6000 (Android 11)
Browsers: Firefox Nightly 125.0a1-20240312214346 / Firefox Release 123.0.1-20240304104836 / Chrome 122.0.6261.64

User Story: (updated)
User Story: (updated)

This reproduces in Firefox on Desktop as well; it's not Android-specific. I can reproduce it in Firefox 127.0.2 (64-bit) on Ubuntu 22.04, for example.

However, it doesn't reproduce in Nightly anymore, due to our "https-first" project (which makes us jump directly to loading https://www.nih.gov/ using https even if http was entered).

I don't know for sure but I suspect that's how this managed to work in Chrome, too; it looks like they have a similar feature, announced last year in https://blog.chromium.org/2023/08/towards-https-by-default.html

OS: Android → All
Hardware: Other → All

Looks like the Nightly pref-flip that made this start working was in bug 1719271, which landed on 6/23 (though it's using an IS_NIGHTLY_BUILD check for now; this isn't riding the trains yet).

I'm not sure if there's a bug for preffing this on for release, so I'll just mark it as depending on the metabug with alias https-first-mode as the underlying platform bug for now.

Depends on: https-first-mode
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: