Comment #3 on issue 29784 by henry.story: User Interface Improvement for  
Client Certificate Usage
http://code.google.com/p/chromium/issues/detail?id=29784

where should I file the bug?

It is a security bug one could argue: to not have a good enough UI to help  
me know
when and where my certificates are being used. The reason it is not visible  
is that
few people do use client certs, and those are usually very knowledgeable  
people. So
there is not much to gain for crackers willing to attack themselves to this  
area.

Imagine for example that it was not obvious when you went to a web site if  
you were
connected securely or not. For example imagine that insecure web sites  
could get the
little padlock icon to appear easily. Then it would be a security bug,  
though one
that would lead people not to use server certificates at all, since it  
would be
obviously of little use.

That is the situation with client certificates today. A few user interface
improvements, would make the web a lot more secure.

But this is an issue that crosses the boundaries of User Interface and  
security
people I agree. And those people I don't think meet that often :-)
So how can I get those two groups to talk ? Where should I post the bug?

--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings

-- 
Automated mail from issue updates at http://crbug.com/
Subscription options: http://groups.google.com/group/chromium-bugs

Reply via email to