227871 - smarter behaviour when accessing https sites

Status: RESOLVED WONTFIX

(Core Graveyard :: Security: UI, enhancement)

Description

[Roland Seuhs]

User-Agent:       Mozilla/5.0 (Linux; U; de; m18) Gecko/20001010
Build Identifier: 

When you access an https site, Mozilla will ask wether to continue (in the 
default setting), when you click yes, the page is loaded. 
 
Since all information is transferred *TO* the browser and none to the website 
(no security problems whatsoever), you could save time by loading the webpage 
in the background while displaying the dialog box  -and displaying it when the 
user clicks "yes" (or discarding it when the user clicks "no")  

Reproducible: Always

Steps to Reproduce:
1. Load any https site 
2. 
3. 
Actual Results:  
Warning dialog displayed - page loaded AFTER pressing "yes" 

Expected Results:  
Display warning dialog  and load page, display page instantly after pressing 
"yes"

Comment 1

[Boris Zbarsky [:bzbarsky]]

To PSM.

Comment 2

[Kai Engert [:KaiE:]]

In the past, well, in Netscape Navigator & Communicator, this dialog wasn't just
an informal message. It gave the user the ability to cancel. Other current
browsers offer this functionality, too. Only Mozilla doesn't offer this level of
support yet.

It is a planned and prepapred enhancement, that some day, this message will
contain a cancel button.

While the cancel button is obvious for a secure to non-secure transition, the
cancel button might not seem obvious for the non-secure to secure transition (as
suggested in this bug). However, some users might not want to do it, because
connecting to a secure site could involve automatic authentication using client
certificates and users might want to cancel.

Because of the planned change, and because users who don't need this warning are
able to turn it off, I'M suggesting WONTFIX.

Comment 3

[Brett Wilson]

*** Bug 308900 has been marked as a duplicate of this bug. ***