Hey folks,

I've opened a bug to track some redesign work in the SSL/TLS certificate 
viewer.  It can be found here:

https://bugzilla.mozilla.org/show_bug.cgi?id=380775

The motivation is explained in the bug, but I wanted to ensure this 
community was aware of the bug, and had a chance to get their comments 
in.  I'll include the motivation here too, so people understand why I'm 
interested in getting this work done:

Certificates are a very technical subject and we don't anticipate users 
walking the tree of cert properties as part of their day-to-day 
browsing.  We do, however, launch the certificate viewer from the 
browser in various places as a way for users to "Verify the certificate."

This leads to things like bug 337392 which are really just the result of 
frustration, because the current cert viewer UI is not optimized for the 
case of a non-expert user trying to make a trust determination.

I propose changing the general tab as presented in the attachment, so 
that the information more neatly anticipates this scenario.  Emphasis is 
placed on the subject and issuer particulars, and taken away from x509 
details like fingerprints (still present, but with some descriptive 
text) and prescribed usages.

This also addresses Firefox 3 line item: SPI-001f.

I would encourage anyone with comments to add them to the bug instead of 
here, so that the conversation doesn't fracture.

Cheers,

Johnathan

-- 
Johnathan Nightingale
Human Shield
Mozilla Corporation
[EMAIL PROTECTED]
_______________________________________________
dev-security mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security

Reply via email to