** Also affects: rhythmbox (Ubuntu)
Importance: Undecided
Status: New
** Description changed:
- The singe sign on page which appears when I buy software in the Software
- Centre doesn't look secure. i can't see anything that indicates it's
- going over SSL. I'd be concerned about buying software from a store that
- doesn't use SSL for their logon screen.
+ When you buy software in Ubuntu Software Center, or music in Rhythmbox,
+ there's no indication that the connection is secure. I'd be concerned
+ about buying software from a store that doesn't use SSL for their logon
+ screen.
<https://wiki.ubuntu.com/SoftwareCenter#security>: "The “View” menu
should contain a “Security Info” item that is insensitive by default ...
Whenever the page is encrypted and the certificate is okay, at the
trailing end of the navigation bar should be a padlock icon with the
label “Secure”, and the “Security Info” item should be sensitive. If you
choose either of those, a “Security Info” window should open with text
“The connection to the store is encrypted.” and information about the
connection and certificate."
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to rhythmbox in Ubuntu.
https://bugs.launchpad.net/bugs/637649
Title:
Single sign on page doesn't look secure
Status in Canonical SSO provider:
Invalid
Status in “rhythmbox” package in Ubuntu:
New
Status in “software-center” package in Ubuntu:
Triaged
Bug description:
When you buy software in Ubuntu Software Center, or music in
Rhythmbox, there's no indication that the connection is secure. I'd be
concerned about buying software from a store that doesn't use SSL for
their logon screen.
<https://wiki.ubuntu.com/SoftwareCenter#security>: "The “View” menu
should contain a “Security Info” item that is insensitive by default
... Whenever the page is encrypted and the certificate is okay, at the
trailing end of the navigation bar should be a padlock icon with the
label “Secure”, and the “Security Info” item should be sensitive. If
you choose either of those, a “Security Info” window should open with
text “The connection to the store is encrypted.” and information about
the connection and certificate."
To manage notifications about this bug go to:
https://bugs.launchpad.net/canonical-identity-provider/+bug/637649/+subscriptions
--
Mailing list: https://launchpad.net/~desktop-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~desktop-packages
More help : https://help.launchpad.net/ListHelp
