4 ms·
The actual Firefox message for a site using a Symantec cert on today’s nightly: Warning: Potential Security Risk Ahead Nightly detected a potential security t
by robin_reala 8y ago
The actual Firefox message for a site using a Symantec cert on today’s nightly:
Warning: Potential Security Risk Ahead
Nightly detected a potential security threat and did not continue to [site].com. If you visit this site, attackers could try to steal information like your passwords, emails, or credit card details.
Websites prove their identity via certificates, which are issued by certificate authorities. Most browsers will no longer trust Symantec, the certificate authority for [site].com.
You may notify the website’s administrator about this problem.
- londons_explore 8y agoI'd much prefer the browser continue to the site, but clear all cookies, treat the domain as an untrusted origin (so all CORS requests fail), and as soon as the user tries to type anything, pop up a big security warning saying "This site isn't secure! You shouldn't put any private data, passwords, or credit card numbers in". Then disable the keyboard entirely.
- ethbro 8y agoDisplaying the site but mangling functionality runs the risk of shifting blame to the browser, which I think is the primary tightrope in their mind. "Firefox won't let me do this" vs "ING's page is broken"