451933 - unsigned firefox setup dialog isn't documented on download page

Status: RESOLVED WONTFIX

(www.mozilla.org :: General, defect)

Description

[timeless]

user agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.0.04506; Tablet PC 2.0)

steps:
1. buy a new hp laptop w/ vista home
2. plug it into a powered outlet and a live ethernet port
3. open internet explorer
4. enter 'firefox.com' and click go
5. click download firefox 3

actual results:
a. some progression of very scary and confusing dialogs

b. this page which is wrong:
Thanks for choosing Firefox!
Just follow these easy steps to get started:

Your download should automatically begin in a few seconds, but if not, click here.

   1. Step 1

      Start the process by clicking Save File.
   2. Step 2

      Give permission to launch the setup wizard by clicking Continue after the file has downloaded.
   3. Step 3

      Follow the steps shown in the setup wizard.
   4. Step 4

      Look for the Firefox icon whenever you want to use the Web!

c. this dialog which happened between 2 and 3 but which should have been listed in steps

Internet Explorer - Security Warning
The publisher could not be verified. Are you sure you want to run this
software?
       Name: Firefox%20Setup%203.0.1.exe
  Publisher: Unknown Publisher
 [ Run ] [ Don't Run ]
--
(.x.) This file does not have a valid digital signature that verifies its publisher. You
      should only run software from publishers you trust. _How can I decide what
      software to run?_

expected results:
either:
* sign the file (preferred)
or
* sniff the user agent and detect vista to show the extra screen described above and explain what it is.

this is a brand new user on a brand new computer with no experience w/ vista and the help (which the user opened) is just more confusing.

Comment 1

[Reed Loden [:reed]]

The binaries are supposed to be signed... Not sure why you're seeing this message. Over to Release Engineering for confirmation that we're signing the binaries.

Comment 2

[timeless]

Attachment: the dialog i got

Comment 3

[timeless]

Attachment: the dialog i got the second time

Comment 4

[timeless]

Attachment: the two files (the first one was truncated)

Comment 5

[timeless]

Attachment: the truncated file

so, afaict the file was truncated, it's possible that this was done by norton, not sure why it'd have done that. but from my perspective i should have been told to expect a certain dialog and that if i got a different dialog, there was a problem.... i haven't done a full comparison on this binary but a quick scan w/ notepad show's it's the same up to the truncation point.

Comment 6

[Nick Thomas [:nthomas] (UTC+12)]

We do sign the Windows installers and their executable contents. Seems to me that that what happened was

1) the first d/l was interrupted but IE didn't notice, executing the file anyway (that mirror does send a Content-Length header for HTTP)
2) that threw up a dialog that isn't documented on mozilla.com

Doesn't make sense to me to me to doc this (hopefully) uncommon case on m.c. If you're saying Vista has extra UI to navigate on a normal install, then I think we should.

Comment 7

[Wil Clouser [:clouserw]]

I'm marking this wontfix on the assumption that the file was truncated and this was uncommon but expected behavior.  If the case is Vista having extra UI please reopen and comment.

Comment 8

[timeless]

the vista ui needs to be doc'd

Comment 9

[Wil Clouser [:clouserw]]

Steven did all the download page design so I'm reassigning to him

Comment 10

[Steven Garrity [:sgarrity]]

Rassigning to Alix as I was just a dumb html/image implementer on this page - didn't determine any of the content.

Comment 11

[Alix Franquet [:alix]]

Regarding the Unknown Publisher issue, I've seen it as well from time to time (see bug 474687) but can't reproduce it in a systematic way. If we could quantify somehow how many times this happens, it would help us figure out if this needs to be documented in SUMO.

See bug 475104 for updates to the page: the steps for Vista and XP are being updated to say "click on Run" and remove the "click on continue", and the screenshots are going to be updated. However, we're not planning to document the unknown publisher warning until we know if it's a frequent case.

timeless: will bug 475104 address your concerns about the UI?

Comment 12

[Alix Franquet [:alix]]

Bug 475104 was fixed today with new instructions for XP and Vista.

timeless: please reopen the bug if this did not address your concern.

Comment 13

[timeless]

fwiw, i can't seem to get those instructions at all anymore. do i need to use a certain web browser?

Comment 14

[Alix Franquet [:alix]]

If you're downloading on Windows with Firefox then you'll be getting the default page. Check out the chart in this blog post describing the current behavior you should observe: 
http://blogmag.net/blog/read/142/Refreshed_downloading_page_on_mozilla_com

The next update will be to add a page for Firefox users downloading Firefox.