It was actually the windows machine that I was using at work. I will try to update the information when I get a chance.

Nelson B wrote:
Jack wrote:


When I got the popup window due to 401 in 1.0.x, it used to indicate
whether it was http versus https.  1.5 does not seem to indicate this
as 1.0.x did. Is this intentional?


This is a problem because one can't tell whether redirection occured or
not and so one can't be sure that one is sending the user name and
password over a secure channel.

Is there a settings to enable display of the protocol (http v. https) as
well?


I posted https://bugzilla.mozilla.org/show_bug.cgi?id=320851 about this.
If true, this seems like a significant security regression to me.

I gather the problem was being reported against linux, and reported it
against the linux version.  If some other version is involved, please
correct that bug report.

_______________________________________________
Mozilla-security mailing list
Mozilla-security@mozilla.org
http://mail.mozilla.org/listinfo/mozilla-security

Reply via email to