[tbb-bugs] #22545 [Applications/Tor Browser]: .onion sites are being labled with "insecure connection"

[Tor Bug Tracker & Wiki]

#22545: .onion sites are being labled with "insecure connection"
--------------------------------------+---------------------------
 Reporter:  mrphs                     |          Owner:  tbb-team
     Type:  enhancement               |         Status:  closed
 Priority:  Immediate                 |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Blocker                   |     Resolution:  duplicate
 Keywords:  #ux-team #tbb-usabilty    |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+---------------------------
Changes (by gk):

 * status:  reopened => closed
 * resolution:   => duplicate


Comment:

 Replying to [comment:6 mrphs]:
 > I don't think this is a dup of #21321 because I don't think there's a
 need to convince mozilla about .onion being secure or not and my reasons
 are:
 >
 > 1) Using .onion on plain Firefox is indeed NOT secure and I think it is
 smart if Firefox users get this warning in case they've proxied their
 browser to use Tor.

 I think I am not convinced. Care to elaborate on that point in #21321?

 > 2) I thought a bit about whether I should open this ticket here or on
 their ticketing system and I decided here because regardless of their
 decision, this seems to be our responsibility to make sure within the Tor
 Browser, .onion sites are labeled correctly.
 >
 > So if you don't mind, I'm going to reopen this ticket.

 We can have this conversation in #21321 as I think we can move both
 aspects forward (write a patch for Tor Browser in a way that it gets
 upstreamed to Mozilla and get Mozilla "convinced"). At least it would be
 useful to have both conversations in one place I think.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22545#comment:7>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online