This is a problem because one can't tell whether redirection occured or not and so one can't be sure that one is sending the user name and password over a secure channel.

Is there a settings to enable display of the protocol (http v. https) as well?

Jack wrote:
Include general news group as well.

Jack wrote:

When I got the popup window due to 401 in 1.0.x, it used to indicate whether it was http versus https. 1.5 does not seem to indicate this as 1.0.x did. Is this intentional?
_______________________________________________
Mozilla-security mailing list
Mozilla-security@mozilla.org
http://mail.mozilla.org/listinfo/mozilla-security

Reply via email to