2000617 - Website showing as not secure while it is loading

Status: VERIFIED FIXED

(Firefox for Android :: Toolbar, enhancement)

Description

[Justin Billman]

Attachment: File.png

Steps to reproduce

1. Visit a site
2. Until we know its secure, we display a 'Not secure" icon in the bar

Expected behavior

Actual behavior

Device information

• Firefox version:
• Android device model:
• Android OS version:

Any additional information?

Consider either showing nothing at all or something that does not assume the site is not secure if we do not know yet

Comment 2

[Petru-Mugurel Lingurar [:petru]]

After checking with UX and product - while we don't know the security status - we should:

• show a different "globe" icon - Figma
• disable the click listener since we don't have enough information to show in the privacy panel.

The initial plan was to go with the info icon (as it's used already by desktop) but that could rather attract user's attention and invite them to click the button. After syncing with Andy and Nicole we'll use the globe icon.
(This behaviour will also be implemented on iOS)

Comment 3

[Petru-Mugurel Lingurar [:petru]]

Attachment: Bug 2000617 - part 1 - Introduce the Unknown security state for a website connection r=#android-reviewers

Previously we only had secure and unsecure statuses but until the webpage details
are loaded there is a short time in which we don't know if the connection is
actually secured or not.

Comment 4

[Petru-Mugurel Lingurar [:petru]]

Attachment: Bug 2000617 - part 2 - Show a globe icon for the security indicator if security is unknown r=#android-reviewers

This should only be shown for a brief moment - until the webpage
connection details are loaded in a new tab.

Comment 5

[Pulsebot]

Pushed by [e-mail]:
https://github.com/mozilla-firefox/firefox/commit/8a883112b1d6
https://hg.mozilla.org/integration/autoland/rev/155a6029c2be
part 1 - Introduce the Unknown security state for a website connection r=android-reviewers,nalexander
https://github.com/mozilla-firefox/firefox/commit/39bc83bb8632
https://hg.mozilla.org/integration/autoland/rev/81ecdc1354ae
part 2 - Show a globe icon for the security indicator if security is unknown r=android-reviewers,nalexander

Comment 6

[Sandor Molnar[:smolnar]]

https://hg.mozilla.org/mozilla-central/rev/155a6029c2be
https://hg.mozilla.org/mozilla-central/rev/81ecdc1354ae

Comment 7

[Mira Lobontiu (Android QA)]

Verified as fixed on the latest Firefox for Android Nightly 148.0a1 from 12/9 using:

• Realme GT Master Edition (Android 13),
• Xiaomi Mi8 Lite (Android 10), and
• Pixel 9 Pro (Android 16).

Comment 8

[Mira Lobontiu (Android QA)]

Attachment: Screenshot_2025-12-10-14-40-52-93_984e1414ae90666a90f12ff17ec14a7f.jpg

Comment 9

[Petru-Mugurel Lingurar [:petru]]

Attachment: Bug 2000617 - part 1 - Introduce the Unknown security state for a website connection

Previously we only had secure and unsecure statuses but until the webpage details
are loaded there is a short time in which we don't know if the connection is
actually secured or not.

Original Revision: https://phabricator.services.mozilla.com/D274290

Comment 10

[Petru-Mugurel Lingurar [:petru]]

Attachment: Bug 2000617 - part 2 - Show a globe icon for the security indicator if security is unknown

This should only be shown for a brief moment - until the webpage
connection details are loaded in a new tab.

Original Revision: https://phabricator.services.mozilla.com/D274291

Comment 11

[Phabricator Automation]

firefox-release Uplift Approval Request

• User impact if declined: Product requested change to fix a long standing issue reported by users and complete the UX of the composable toolbar released to more users through Nimbus in 146.
• Code covered by automated testing: yes
• Fix verified in Nightly: yes
• Needs manual QE test: yes
• Steps to reproduce for manual QE testing: https://bugzilla.mozilla.org/show_bug.cgi?id=2000617#c0
• Risk associated with taking this patch: low
• Explanation of risk level: Multiple files updated but with minimal changes.
  Verified by QA.
• String changes made/needed: --
• Is Android affected?: yes

Comment 12

[Pulsebot]

https://github.com/mozilla-firefox/firefox/commit/913711bd57cd
https://hg.mozilla.org/releases/mozilla-release/rev/6a4e7911886c
https://github.com/mozilla-firefox/firefox/commit/24bba8ae191f
https://hg.mozilla.org/releases/mozilla-release/rev/a9e8e6b8ff91

Comment 13

[Adina Petridean QA [:apetridean]]

Verified as fixed on Fenix 147.05 and RC 146.0.1 with Google Pixel 10 (Android 16) and Moto G72 (Android 13.