267414 - provide more detailed unknown/untrusted secure certificate dialogues

Status: RESOLVED FIXED

(Camino Graveyard :: General, defect)

Description

[Smokey Ardisson (offline for a while; not following bugs - do not email)]

User-Agent:       Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.8a5) Gecko/20041031 Camino/0.8+
Build Identifier: Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.8a5) Gecko/20041031 Camino/0.8+

Camino provides rather uninformitive dialogues where security certificates are
"other than normal"--self-signed, not matching the site one is visiting,
etc.--in most cases not even telling the user what site the certificate claims
to be assigned to.

Reproducible: Always
Steps to Reproduce:
A. https://mail.yahoo.com
1. Log in to your Yahoo account and let it set a cookie.
2. Do not log out, but leave the Yahoo network for a while.
3. Later (after a while, Yahoo will require a login again) visit
https://mail.yahoo.com directly (Yahoo's logins default to non-secure versions).
4. Observe the warning dialogue

B. https://www.hilander.com/ssltest/ (mentioned in bug 170355)  
1. Visit the site directly
2. Observe warning dialogue
Actual Results:  
Dialogues don't provide much info about what the error might be, what the
certificate claims to be vs. what the site is that user visiting, etc.

See following attachments for these two sites as displayed in Camino, Firefox,
Safari.

Expected Results:  
More informative dialogues, ability to "inspect" the certificates, etc.  See
following attachments for these two sites as displayed in Camino, Firefox,
Safari.  The detail provided by Firefox would be wonderful, but even the level
provided by Safari would be a slight but useful improvement.

To me this lack of detail seems to significantly impair the user's security
(and/or the user's ability to determine security) when visiting secure sites
that may be spoofed, broken, misconfigured, etc.  

Thus I'm requesting "major" rather than "enhancement" or even "normal."

Comment 1

[Smokey Ardisson (offline for a while; not following bugs - do not email)]

Attachment: Camino, Firefox, Safari dialogues at (A) https://mail.yahoo.com

Camino, Firefox, Safari dialogues at (A) https://mail.yahoo.com

Comment 2

[Smokey Ardisson (offline for a while; not following bugs - do not email)]

Attachment: Camino, Firefox, Safari dialogues at (B) https://www.hilander.com/ssltest

Camino, Firefox, Safari dialogues at (B) https://www.hilander.com/ssltest

Comment 3

[Jasper]

Camino doesn't have a good UI for Certificates. If it would it would use what FF
has. I think we even lack major features on Certificate level. This is something
we shoulod defenitly get fixed by 1.0.

Comment 4

[Bruce Davidson]

Even Firefox's interface isn't great. I just gives you a long list of possible
causes. This is poor UI, both because it makes for far more text in the dialogue
than is necessary, and because it doesn't help the user to work out what to do.
I'm probably not too concerned if the certificate is invalid because it expired
yesterday, I'm more concerned if the certificate is for a different domain.
Similarly if the signing authority isn't one built into Camino all I really want
are the details of the certificate and who signed it; I trust my employer's self
signed certificate for the extranet, but only if I can actually see the certificate.

Comment 5

[Smokey Ardisson (offline for a while; not following bugs - do not email)]

*** Bug 304779 has been marked as a duplicate of this bug. ***

Comment 6

[Simon Fraser [no longer active]]

Patch in bug 151656 fixes this.

Comment 7

[Simon Fraser [no longer active]]

Fixed by the checkin for bug 151656.