Specification updated.
<https://wiki.ubuntu.com/SoftwareCenter?action=diff&rev2=624&rev1=623>

** Changed in: software-center (Ubuntu)
     Assignee: Matthew Paul Thomas (mpt) => (unassigned)

** Description changed:

  The singe sign on page which appears when I buy software in the Software
  Centre doesn't look secure. i can't see anything that indicates it's
  going over SSL. I'd be concerned about buying software from a store that
  doesn't use SSL for their logon screen.
+ 
+ <https://wiki.ubuntu.com/SoftwareCenter#security>: "The “View” menu
+ should contain a “Security Info” item that is insensitive by default ...
+ Whenever the page is encrypted and the certificate is okay, at the
+ trailing end of the navigation bar should be a padlock icon with the
+ label “Secure”, and the “Security Info” item should be sensitive. If you
+ choose either of those, a “Security Info” window should open with text
+ “The connection to the store is encrypted.” and information about the
+ connection and certificate."

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to software-center in Ubuntu.
https://bugs.launchpad.net/bugs/637649

Title:
  Single sign on page doesn't look secure

Status in Canonical SSO provider:
  Invalid
Status in “software-center” package in Ubuntu:
  Triaged

Bug description:
  The singe sign on page which appears when I buy software in the
  Software Centre doesn't look secure. i can't see anything that
  indicates it's going over SSL. I'd be concerned about buying software
  from a store that doesn't use SSL for their logon screen.

  <https://wiki.ubuntu.com/SoftwareCenter#security>: "The “View” menu
  should contain a “Security Info” item that is insensitive by default
  ... Whenever the page is encrypted and the certificate is okay, at the
  trailing end of the navigation bar should be a padlock icon with the
  label “Secure”, and the “Security Info” item should be sensitive. If
  you choose either of those, a “Security Info” window should open with
  text “The connection to the store is encrypted.” and information about
  the connection and certificate."

To manage notifications about this bug go to:
https://bugs.launchpad.net/canonical-identity-provider/+bug/637649/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to     : [email protected]
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to