New issue
Advanced search Search tips
Note: Color blocks (like █ or █) mean that a user may not be available. Tooltip shows the reason.

Issue 642499 link

Starred by 1 user
Status: Archived
Owner: ----
Closed: Aug 2016
Cc:
mard...@chromium.org
█ melodychu@chromium.org
█ nataliyaf@chromium.org
█ jainabhi...@chromium.org
eugene...@chromium.org
pinkerton@chromium.org
pkl@chromium.org
ios-bugs@chromium.org
EstimatedDays: ----
NextAction: ----
OS: Android , iOS
Pri: 3
Type: Bug



Sign in to add a comment

Make "Your connection is not private" message more actionable for users

Project Member Reported by hongchic...@chromium.org, Aug 30 2016 
Version: <52.0.2743.98>
OS: <Android & iOS>

What steps will reproduce the problem?
We've seen the spike of "Your connection is not private" in holiday seasons repeatedly while users are travelling to different time zone and having more chances to log into captive portal. 
Current message on the error page is not quite actionable and looks scary to users. 

Playstore comments by users: 
https://screenshot.googleplex.com/er0yyWNXJ94
https://screenshot.googleplex.com/gEtb5HajoM1
https://screenshot.googleplex.com/mrE02d2m5Ex

What is the expected output?
Clear troubleshooting steps for users who experience following errors:
- NET: ERR CERT DATE INVALID
- NET ERR CERT AUTHORITY INVALID

What do you see instead?
Your Connection is not private Attackers might be trying to steal your information from www.google.com (for example, passwords, messages or credit cards)

Please use labels and text to provide additional information.

Comment 1 by hongchic...@chromium.org, Aug 30 2016 

Attached the trend of feedback reports.
Screen Shot 2016-08-30 at 11.51.28 AM.png
138 KB View Download

Comment 2 by mea...@chromium.org, Aug 30 2016 

We are currently doing some work regarding captive portals. The umbrella bug is https://crbug.com/335933

The generic SSL interstitial is replaced with a custom captive portal interstitial on desktop when a portal is detected, but not on mobile. One of our next steps is to enable this custom interstitial on mobile too.

There is also ongoing work to build a trusted time service which should help with date invalid errors.

Comment 3 by f...@chromium.org, Aug 30 2016

Status: Archived (was: Untriaged)
We have a multi-year, multi-engineer project working on detecting the underlying causes of these errors and showing more actionable text when detection is possible.

Comment 4 by mard...@chromium.org, Aug 31 2016

Cc: pinkerton@chromium.org pkl@chromium.org eugene...@chromium.org
+ Pink and Peter and Eugene (FYI) 

felt@: Is there a timeline for launching the improved error messages? Thanks.

Comment 5 by f...@chromium.org, Sep 12 2016 

We roll them out as we get to them, it's an ongoing project not something with one clear launch.

Captive portal changes should happen in 55 or 56 tho.

Comment 6 by lafo...@chromium.org, Dec 9 2016

Components: -Security>UX
Labels: Team-Security-UX
Security>UX component is deprecated in favor of the Team-Security-UX label
►

Sign in to add a comment