Browser address bar and chrome does not draw attention to when sites are insecure HTTP

wesinator

Orion does not differentiate between sites that are insecure http and https in the address bar information.

Visit: http://uw714doc.xinuos.com/en/Navpages/index.html
Compared to a https site like https://www.google.com

There is no discernable difference in the address bar with how these two sites are displayed.

Expected: Highlight the insecure scheme in red or with a opened lock icon or something.

Firefox iOS for example has a lock with a red line through it to the side of the url in the address bar when a tab is insecure.

1.3.26

Michal

I see a warning icon

wesinator

Michal what version and device are you on?
I do not see that in the 1.3.26 release with 11 tabs open, on an SE form factor device.

wesinator

Michal

This is what it looks like

snuser

wesinator I figured it out, the lock doesn’t appear cause you have the “Show Full URLs” option enabled.

Michal

This is correct, and this is what some users wanted. Unlike short url, the full url is left aligned and without the lock icon

wesinator

Hmm, I see that now. A few suggestions for how to improve this:

I do think it would be good to show a status indicator for an insecure site even if Show Full URLs is enabled. This could be done by a red highlight on the url text or text background if the scheme is http.
Not a big deal but making the lock icon on an http scheme a neutral red color might be a good change to draw more attention to the resource being insecure.

With show full urls disabled, the lock status icon is hidden off the address bar for a long hostname URL, such as the redirect sites from neverssl.com (shown above with the full url setting).
To reproduce: visit neverssl.com when "Show Full URLs" is turned off.

jeanetienne

Hi wesinator, thank you for the detailed comment.

I agree with you, showing the insecure indicator should be possible even with full URLs.

I'm working on an area of the code that should make this change easier soon-ish. I'll mark this ticket as planned, but it may be a little while before we can make change on this specific issue.

Thank you for your patience and your help in making Orion a better browser!