745133 - Define SeaMonkey's behaviour for SSL errors

Status: REOPENED

(SeaMonkey :: Security, defect)

Description

[Kai Engert (:KaiE:)]

As of today, if a fatal connection error occurrs on a SSL/TLS socket, no feedback will be given to the user. This is different from we had in the past.

In my opinion this behaviour is undesirable, as it gives the user the impression of a nonworking product.

I'm trying to re-implement the fallback notification prompt, which would be shown if the application hasn't implemented specific error handling.

Unfortunately I'm facing heavy resistance against my proposal in bug 682329. Even if I succeeded, each application would have to opt in to getting the fallback notification prompts.

If you believe that having the fallback prompt implemented in the core, which you could simply activate in your product using a couple of line of code, would be beneficial for you, then I'd suggest to support me in my attempt to get that added in bug 682329.

I will attach a patch that you can use for testing.

Comment 1

[Kai Engert (:KaiE:)]

Attachment: Patch v8

Matches patch v8 from bug 682329

Comment 2

[Philip Chee]

Comment on attachment 614723 [details] [diff] [review]
Patch v8

Kaie: is this patch still valid? Are you going to ask for a review?

Comment 3

[Kai Engert (:KaiE:)]

Attachment: patch v9

Comment 4

[Kai Engert (:KaiE:)]

Attachment: Patch v10