453172 - "Larry" should link to Certificate manager for exception sites.

Status: RESOLVED DUPLICATE of bug 1220753

(Firefox :: Security, enhancement, P3)

Description

[Daniel Veditz [:dveditz]]

We allow users to make exceptions for certs we cannot validate due to unknown issuer, mismatched name, or because they are expired. The SSL error page will open the exception dialog for the user, so the user has no way to figure out how to get back to that dialog if they want to revoke the exception.

The Site Information panel ("Larry") does tell people when a cert is valid because they've made an exception rather than "Verified by FooCA". It would help if that text ("You have added a security exception for this site") were made a link that opened up the Servers pane of the Certificate Manager.

Should definitely get this into 3.1, but if it's just a new link and no new text without any complicated code it'd be nice to back-port to 3.0.x too.

Comment 1

[Johnathan Nightingale [:johnath]]

I agree.  Buried under post-vacation email pile right now - but I'll take a look at this - it would be a nice linkage.

Comment 2

[Kyle Hamilton]

Larry should be yellow if a site uses a certificate trusted by other than the Built-In Token.  That UI alteration could also link directly to the Certificate Manager.

This would permit corporations to use MITM proxies with non-fully-trusted certificates, with a clear visual indicator that they were trusted by a local policy decision and do not provide the guarantees of privacy or authenticity that HTTPS normally provides.

Comment 3

[:Cykesiopka]

Bug 1220753 implements the more natural feature of just adding a button to allow revoking an exception for a site in the Control Center, so I'm marking this bug as a dupe.