If you think a bug might affect users in the 57 release, please set the correct tracking and status flags for Release Management.

Secure lock icon shown on pages with insecure content

RESOLVED INCOMPLETE

Status

()

Core
Security
--
major
RESOLVED INCOMPLETE
11 years ago
7 years ago

People

(Reporter: David Miller, Assigned: dveditz)

Tracking

(Blocks: 1 bug)

1.8 Branch
x86
Windows XP
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(URL)

Attachments

(3 attachments)

(Reporter)

Description

11 years ago
User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1b2) Gecko/20060818 BonEcho/2.0b2
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1b2) Gecko/20060818 BonEcho/2.0b2

The secure-site icon is appearing for websites and can be "bypassed" if necessary as well.  If you navigate to the website in my URL field you can login 

Reproducible: Always

Steps to Reproduce:
1. navigate to the website in the URL field
2. login
3. refresh the page, then head to http://webmail.optonline.net again (make sure cookies are enabled "save session" is ticked off when you log into the website)

Actual Results:  
upon refresh/login the site will display a secure logo instead.

Expected Results:  
The secure site icon should be consistent with what is discovered by the browser.  It should not change it's mind after refreshing the mail page itself.  If it is true that the mail-server itself has a secure certificate, then the browser should have loaded the new certificate anyways and the icon should be adopted the new secure appearance.

If someone cannot be found who does not have an account with Optimum Online, I'll be more than happy to provide you with an e-mail address so that it can be tested out.

Thanks to Dave Townsend for helping me write this long winded bug report :-)
(Reporter)

Comment 1

11 years ago
Created attachment 234458 [details]
image
(Reporter)

Comment 2

11 years ago
Created attachment 234459 [details]
image2
*** Bug 349208 has been marked as a duplicate of this bug. ***
(Reporter)

Comment 4

11 years ago
Created attachment 234460 [details]
image3
(Reporter)

Updated

11 years ago
Version: Trunk → 1.8 Branch

Updated

11 years ago
Blocks: 130949
Summary: Secure icon shown on pages with insecure content → Secure lock icon shown on pages with insecure content
Is this bug really valid? The location bar looses its yellow background the lock icon present is the broken lock icon, which indicates a broken security state on that site. Isn't that exactly what's supposed to happen?
Nevermind, I didn't read the report carefully enough to fully understand what's going on. Sorry for the bugspam.
Resolving unconfirmed bugs older than a year with no activity as INCOMPLETE.  Please reopen or file a new bug if you can still reproduce the bug.
Status: UNCONFIRMED → RESOLVED
Last Resolved: 7 years ago
Resolution: --- → INCOMPLETE
You need to log in before you can comment on or make changes to this bug.