Jack wrote: >>> When I got the popup window due to 401 in 1.0.x, it used to indicate >>> whether it was http versus https. 1.5 does not seem to indicate this >>> as 1.0.x did. Is this intentional?
>> This is a problem because one can't tell whether redirection occured or >> not and so one can't be sure that one is sending the user name and >> password over a secure channel. >> >> Is there a settings to enable display of the protocol (http v. https) as >> well? I posted https://bugzilla.mozilla.org/show_bug.cgi?id=320851 about this. If true, this seems like a significant security regression to me. I gather the problem was being reported against linux, and reported it against the linux version. If some other version is involved, please correct that bug report. -- Nelson B _______________________________________________ Mozilla-security mailing list Mozilla-security@mozilla.org http://mail.mozilla.org/listinfo/mozilla-security
