[Touch-packages] [Bug 1489643] Re: [pay UI] Paypal login cannot be assured to be from paypal

2016-05-05 Thread Rodney Dawes
@sil I don't think there will ever be any way to guarantee that. Any UI that appears on the screen can be replicated, so there is no way we can place something in that UI itself, which could not be replicated. Not even 2FA will protect against that, as any 'fake' UI could also just as easily respon

[Touch-packages] [Bug 1489643] Re: [pay UI] Paypal login cannot be assured to be from paypal

2016-03-19 Thread Rodney Dawes
** Project changed: pay-ui => pay-service (Ubuntu) -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to webbrowser-app in Ubuntu. https://bugs.launchpad.net/bugs/1489643 Title: [pay UI] Paypal login cannot be assured to be from

[Touch-packages] [Bug 1489643] Re: [pay UI] Paypal login cannot be assured to be from paypal

2016-03-14 Thread Olivier Tilloy
Closing the webbrowser-app task, it’s already doing the right thing wrt certificates (minus differentiating EV certificates, which is bug #1402725). ** Changed in: webbrowser-app (Ubuntu) Status: Confirmed => Invalid -- You received this bug notification because you are a member of Ubuntu

[Touch-packages] [Bug 1489643] Re: [pay UI] Paypal login cannot be assured to be from paypal

2016-03-09 Thread Stuart Langridge
@jdstrand: I may have not explained this ideally. Yes, EV certs will protect us if your router is trying to lie to you about where paypal.com is, but they don't help at all if my app shows something which looks like the trust-store dialog but actually isn't. Users will then type their Ubuntu One pa

[Touch-packages] [Bug 1489643] Re: [pay UI] Paypal login cannot be assured to be from paypal

2016-03-09 Thread Launchpad Bug Tracker
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: webbrowser-app (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to webbrowser-app in Ubuntu. https://bu

[Touch-packages] [Bug 1489643] Re: [pay UI] Paypal login cannot be assured to be from paypal

2016-02-11 Thread Pat McGowan
** Changed in: canonical-devices-system-image Status: New => Confirmed ** Changed in: canonical-devices-system-image Importance: Undecided => Medium ** Changed in: canonical-devices-system-image Milestone: None => backlog ** Changed in: canonical-devices-system-image Assignee:

[Touch-packages] [Bug 1489643] Re: [pay UI] Paypal login cannot be assured to be from paypal

2016-02-05 Thread Rodney Dawes
** Also affects: webbrowser-app (Ubuntu) Importance: Undecided Status: New ** Also affects: canonical-devices-system-image Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to