On Wed, September 23, 2015 2:17 pm, R Kent James wrote: > Might there be some alternative, like a big red popup that appears for a > couple of weeks with a warning and an option to continue?
I would suggest continuing to explore alternatives. Chrome's experiments with this show that, to users, it does not appear to be less disruptive or confusing, even if 'logically' it should be. We (Chrome) did this with SHA-1 deprecation *well in advance* of removing support, to give the industry the time it agreed it needed, and took ample hit from those who'd agreed to the timeline (any sort of communication is seen as advancing the timeline) and from users (who found it confusing and not actionable by the user). In short, if there isn't something directly and immediately that a user can do, it doesn't help. And "send an email to your administrator" unfortunately doesn't meet that criteria for empowerment. _______________________________________________ dev-security-policy mailing list [email protected] https://lists.mozilla.org/listinfo/dev-security-policy
