709031 - ssl_error_token_insertion_removal

Status: RESOLVED WONTFIX

(Firefox :: Security, defect)

Description

[mathews]

User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; InfoPath.2; .NET CLR 1.1.4322)

Steps to reproduce:

I open a https URL and i have a smartcard in my smartcard reader. FF 8.0.1 ask me for the Masterpasswort. I select my cerificate und the authentication works fine and my https website opens. When i remove my smartcard (it is an Alladin eToken Pro) and i click on a link in the https web site i get the following Error message: ssl_error_token_insertion_removal. Thats okay!! 


Actual results:

But when i click 5 times on the Button "Nochmals versuchen" (i think in English "try again") the https site open and i have full access to all the data in the Site, without a smartcard!!!


Expected results:

The error message must keep up as long as the card is removal.
Another way is to close the Session, that no third party comes to the information on the HTTPS site.

Comment 1

[Sylvestre Ledru [:Sylvestre]]

No activity for 7 years, I think it is safe to close this bug.