64367 - encryption lock is displays ftp site as encrypted

Status: RESOLVED WORKSFORME

(Core :: DOM: Navigation, defect)

Description

[Paul Baker]

Overview:
Visit an encryptted web page in a browser window. Then click on a link to an ftp
site from another non-browser window. This will make the browser window grab
focus and then open the ftp link. The encryption lock will still show that the
ftp site is encrypted. Clicking on the lock to bring up PSM reports that the the
ftp site supports authentication and encrypttion.

Steps to Reproduce:
1) Visit an encryptted page. I was able to reproduce this by visiting
https://www.musicvideodistributors.com/

2) Click on an ftp link from a non-browser window. I reproduced this by clicking
on an ftp link to ftp://ftp.mozilla.org/ from within ChatZilla and from within
an email containing the link.

Actual Results:
The encryption lock will still show that the ftp site is encrypted. Clicking on
the lock to bring up PSM reports that the the ftp site supports authentication
and encryption. If you click to view the certificate for the site, it will
display the certificate of the encrypted website you were  viewing before
clicking the ftp link.

Expected Results:
The lock icon should show that the ftp site is not encrypted. Clicking the lock
should not report that the site supports authentication or encryption. It should
not show a site certificate.

Build Date & Platform:
2001010404 win32-talkback on Windows 98 4.10.1998

Comment 1

[sairuh (rarely reading bugmail)]

junruh/vishy, should this go to crypto?

Comment 2

[John Unruh]

Crypto

Comment 3

[John Unruh]

New

Comment 4

[David P. Drinan]

Mass changing of product. Browser:Security:Crypto --> PSM 2.0

Comment 5

[John G. Myers]

nsSecureBrowserUI doesn't get a STATE_TRANSFERRING|STATE_IS_DOCUMENT 
notification for ftp://ftp.mozilla.org

This is a bug in the docloader.  Changing component to Browser/ Embedding: 
Docshell

Comment 6

[Judson Valeski]

docloader -> rpotts.

Comment 7

[Asa Dotzler [:asa]]

Bugs targeted at mozilla1.0 without the mozilla1.0 keyword moved to mozilla1.0.1 
(you can query for this string to delete spam or retrieve the list of bugs I've 
moved)

Comment 8

[Daniel Veditz [:dveditz]]

WFM

tried entering the ftp site via the urlbar, dragging links from outside, and
clicking links in external apps (AIM and chatzilla). Tried both Mozilla and Firefox.