654592 - Firefox untrusted certificate warning is carried between tabs.

Status: RESOLVED WORKSFORME

(Core Graveyard :: Security: UI, defect)

Description

[stremail]

User-Agent:       Mozilla/5.0 (Windows NT 6.1; rv:2.0.1) Gecko/20100101 Firefox/4.0.1
Build Identifier: Mozilla/5.0 (Windows NT 6.1; rv:2.0.1) Gecko/20100101 Firefox/4.0.1

If a browser tab displaying the untrusted certificate warning is open while browsing in another tab to a secure site, the browser displays the untrusted certificate warning irrespective of the latter certificates validity.

Reproducible: Always

Steps to Reproduce:
1. Browse to a site which displays an untrusted certificate warning and leave open.
2. Open a new tab and browse to a secure site.


Actual Results:  
The untrusted certificate warning appeared on the latter site, as well as the first tabbed site, even when these sites were neither hosted on the same domain nor on the same physical server.


Expected Results:  
The security status of a site in one tab should be independent of security status in other tabs.

One would expect a secure site to open normally even when an insecure warning is displayed at the same time in another tab.

Comment 1

[stremail]

Attachment: This attachment shows the untrusted warning for a valid site when opened in a tabbed session including a site correctly identified as untrusted.

Comment 2

[stremail]

Attachment: This attachment shows the valid site when opened in a browser session which does not include a tab displaying an untrusted certificate warning.

Comment 3

[u279076]

I'm not exactly sure how you are reproducing it. What site are you loading in each tab?

Comment 4

[Dana Keeler (she/her) (use needinfo) [:keeler] (on leave)]

This was probably a certificate path building issue. Since we now use mozilla::pkix, this shouldn't be happening any longer. Feel free to reopen with more information on how to reproduce the issue if that isn't the case.