7 ms·
Because we have data showing that anything less leads to easy impersonations of sites. Browser security UI is hard.
by wbl 3y ago
Because we have data showing that anything less leads to easy impersonations of sites. Browser security UI is hard.
- dcow 3y agoWhere can I review this data?
- hedora 3y agoShowing certificate details on the "OMFG SOMETHING IS WRONG" page makes it easier to impersonate sites? Why not show the certificate details, explain what is wrong, and then still have the annoying click through flow?
- mook 3y agoAt least you're not using Firefox for Android; that doesn't even let you view cert data on sites with proper certs (like this one). Chrome on Android does.
- dzikimarian 3y agoNon-technical user often concludes "this app is broken" if screen shows anything more than one liner in the tune of "website/internet connection is bad". User actually reading the screen is sadly scarce resource today.
- gerdesj 3y ago"Browser security UI is hard." That's my problem, not "yours". Start writing perfect code and then I will delegate. The current browser UI for SSL/TLS is actively punishing people like me who wish to get SSL working. Why not follow the example of Lets Encrypt and make it easier instead of harder? The current UI is crap for both me and my wife and we are at the polar extremes of the audience for it. Perhaps we need a faster DNS implementation or a rewrite in Rust.