560295 - https://developer.mozilla.org/ encryption

Status: RESOLVED DUPLICATE of bug 461599

(developer.mozilla.org Graveyard :: User management, task)

Description

[user01]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3
Build Identifier: 

Why does https://developer.mozilla.org/ use encryption? What is so private there? And why is server response time so long (about 30 seconds as of April 19, 2010)?

Reproducible: Always

Comment 1

[Eric Shepherd [:sheppy]]

It's to keep passwords secure.

Comment 2

[user01]

Maybe use encryption just for login page, not for all pages?

I also receive the following information message on error console each time I load some https://developer.mozilla.org/ page:

developer.mozilla.org : potentially vulnerable to CVE-2009-3555

Does it have something to do with long page loading time and occasional blank page display?

There is a bug about CVE-2009-3555 https://bugzilla.mozilla.org/show_bug.cgi?id=526689

Comment 3

[Eric Shepherd [:sheppy]]

There are other bugs filed about this problem, such as bug 461599. I recognize that has some visibility limitations on it; I don't entirely know why. Marking as a duplicate of that.

Comment 4

[user01]

Sorry for reopening the bug again.

Bug 461599 seems to be security bug which makes it invisible to unauthorized users.

What about encryption just for login page?

Comment 5

[Eric Shepherd [:sheppy]]

We're trying to make that happen; that's what that bug is about.

Comment 6

[user01]

Thank you for clarification.