1.) Edit > Prefs > Privacy > SSL What happens: Not all prefs are on by default, and the form submit pref is greyed out.
John, are you trying this on a default profile? Which options are not on? Also, the form submit pref is supposed to be grayed out, but it should be checked, not unchecked. So that clearly needs to get fixed.
With a new profile, these prefs are off by default and should be on. 1.) Redirection from one secure site to another. 2.) Redirection from a secure site to an insecure site. 3.) Also, the form submit pref is greyed out and not checked.
Form submit insecure from secure pref is being removed per bug 50168. I disagree that all prefs should be turned on by default. "Entering a site that supports encryption" should in its present form be off by default. "Redirection from one secure site to another" should also be off by default.
Marking fixed. jgmyers, please open a new RFE bug concerning "Entering a site that supports encryption should in its present form be off by default".