264769 - security warning about leaving an encrypted page comes up when going "home" or to bookmarks

Status: VERIFIED WONTFIX

(Camino Graveyard :: General, enhancement)

Description

[Mick Fox]

User-Agent:       Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.7.2) Gecko/20040825 Camino/0.8.1
Build Identifier: Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.7.2) Gecko/20040825 Camino/0.8.1

The warning is to protect the user from secure sites that link to non-secure
sites.  This warning is not necessary when the home button or bookmarks are used.

Reproducible: Always
Steps to Reproduce:
1. Make sure "Preferences -> Security -> Leaving a page..." is turned on
2. Leave this page by clicking on "Home" or a bookmark

Actual Results:  
A security warning dialog sheet appears.

Expected Results:  
Not shown the security warning.

Comment 1

[Mike Pinkerton (not reading bugmail)]

tempted to wontfix. if the user says they want to know when leaving a secure
site, then we should always tell them.

Comment 2

[Mick Fox]

This feature is very useful when protecting users from links that appear to be secure, but aren't.  
Bookmarks & home pages don't appear to be part of a secure site.  They feel like the start of a new 
session, comparable to opening a new window.  In this case, when the dialog pops up it's a bit 
obnoxious.

On the other hand, I'm probably not the best person to guess what people want when they use this 
feature.  I prefer to have it off.

Comment 3

[Bruce Davidson]

I'm going to confirm this as a valid enhancement request. I understand Mike's
point, but on the other hand it is very annoying to be "warned" that the browser
is doing exactly what you just asked it to do. (I would add "when the user types
in a new URL" to the list of conditions, but maybe just "home" and bookmarks
would be best.)

A quick check with Mozilla and Firefox shows they suffer the same problem.
However Firefox defaults this to off and doesn't appear to have the option
anywhere other than about:config. Safari has no option to provide an equivalent
warning, so its UI appears neater in this case.

Comment 4

[Mike Pinkerton (not reading bugmail)]

i think it's a breach of trust to sometimes warn users about taking them out of
a secure site and not others. We understand the difference, to must users it
will appear as random. I'm going to WONTFIX this.

Comment 5

[Smokey Ardisson (offline for a while; not following bugs - do not email)]

*** Bug 321904 has been marked as a duplicate of this bug. ***