Opened 5 months ago

Last modified 5 months ago

#34370 new defect

Improve identity doorhanger message during failed onion authentication

Reported by: antonela Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords: tbb-9.5-issues
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

When you visit an onion site that requires authentication and you click cancel, then you click the circled-i button to the left of the URL, it says connection is not secure.

But there is no connection, and any handshake-type stuff that happens is all secure, right? Maybe it's not an issue but I thought I'd just bring it up.

via https://blog.torproject.org/comment/288072#comment-288072

Child Tickets

Attachments (1)

onionauthnotsec.png (36.9 KB) - added by antonela 5 months ago.

Download all attachments as: .zip

Change History (4)

Changed 5 months ago by antonela

Attachment: onionauthnotsec.png added

comment:1 Changed 5 months ago by mcs

As someone pointed out on the blog, this behavior is the same as for all error pages that Firefox displays. There is a really old bug report for this issue:
https://bugzilla.mozilla.org/show_bug.cgi?id=420095
Unfortunately, it was closed due to lack of activity.

comment:2 in reply to:  1 ; Changed 5 months ago by gk

Replying to mcs:

As someone pointed out on the blog, this behavior is the same as for all error pages that Firefox displays. There is a really old bug report for this issue:
https://bugzilla.mozilla.org/show_bug.cgi?id=420095
Unfortunately, it was closed due to lack of activity.

I don't understand how this ticket got closed in the first place. I mean folks were seeing the bug. What about reopening and linking to this issue, so it's harder to close it this time and no one notices/cares?

Last edited 5 months ago by gk (previous) (diff)

comment:3 in reply to:  2 Changed 5 months ago by mcs

Replying to gk:

I don't understand how this ticket got closed in the first place. I mean folks were seeing the bug. What about reopening and linking to this issue, so it's harder to close it this time and no one notices/cares?

Done. Maybe some more Tor Browser people will want to add themselves to that bug's Cc list.

Note: See TracTickets for help on using tickets.