[prev in list] [next in list] [prev in thread] [next in thread] 

List:       konq-bugs
Subject:    [Bug 113674] New: SSL-encryption symbol with no real SSL-connection,
From:       Heinrich Peters <Heinrich-Peters () nurfuerspam ! de>
Date:       2005-10-01 13:13:58
Message-ID: 20051001151357.113674.Heinrich-Peters () nurfuerspam ! de
[Download RAW message or body]

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
         
http://bugs.kde.org/show_bug.cgi?id=113674         
           Summary: SSL-encryption symbol with no real SSL-connection, only
                    SSL-iframe
           Product: konqueror
           Version: 3.4.2
          Platform: Debian testing
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: wishlist
          Priority: NOR
         Component: general
        AssignedTo: konq-bugs kde org
        ReportedBy: Heinrich-Peters nurfuerspam de


Version:           3.4.2 (using KDE KDE 3.4.2)
Installed from:    Debian testing/unstable Packages
Compiler:          gcc version 4.0.2 Debian 4.0.2-1
OS:                Linux

When loading a page over a http connection, which contains an iframe conneting over a \
https connection, Konqueror indicates a secured connection. Due to the 3 \
announcements for a safe connection the user could think now that all data are \
protected. One can control only at the address or at the safety information.
I think it is not necessary to indicate a secure connection for the whole page. \
Straight because lately some phishing attacks take place. Other browser (e.g. \
Firefox) don't do this either.

Sorry for my English....

Yours Heiner


====== example page ======
<html>
  <head>
    <title>Konqueror SSL-test page</title>
  </head>
  <body>
    <p>This page indicates a secure SSL connection, even if it doesn't use one!</p>

<!-- The secure connection only in a nonvisible iframe -->
    <iframe src="https://www.verisign.de/" width="0" height="0">
</body>
</html>
_______________________________________________
Konq-bugs mailing list
Konq-bugs@mail.kde.org
https://mail.kde.org/mailman/listinfo/konq-bugs


[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic