281314 - Search function prompts for unencrypted data being sent

Status: RESOLVED INVALID

(addons.mozilla.org Graveyard :: Public Pages, defect)

Description

[Frank Fridlund]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.5) Gecko/20041107 Firefox/1.0
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.5) Gecko/20041107 Firefox/1.0

u.m.o currently uses the https: protocol, meaning that the site is securely
encrypted.  However, when someone enters text in the search box and hits "Go",
Firefox prompts the user about data being sent over an unencrypted connection. 
Normally it's not a problem, but end-users may be a little spooked about seeing
such a message.

Reproducible: Always

Steps to Reproduce:
1. Enter any text in the search box at the URL given above
2. Click "Go"
3.

Actual Results:  
A couple message boxes appear.  The first one warns as given above.  The second
one (appears unless users have asked not to be warned again) will present that
the user is leaving an encrypted page.

Expected Results:  
none of these message boxes should appear.

It may not be possible to do anything about this unless either a search function
is provided directly on mozilla.org's site, or possibly a https: connection to
Google.  It's understandable if this is marked INVALID.

Comment 1

[alanjstr]

This is normal browser behavior when you submit a form from an https site to a
http site.  In this case, we're https and google is not.  CVS already has an
internal search engine instead of using google.