New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 646545 link

Starred by 2 users

Issue metadata

Status: Fixed
Owner:
Last visit > 30 days ago
Closed: Dec 2016
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: iOS
Pri: 1
Type: Bug
Team-Security-UX

Blocked on:
issue 647559
issue 647822
issue 648839

Blocking:
issue 647754


Participants' hotlists:
Security-UX-Consistency


Sign in to add a comment

Show ⓘ for passwords/credit cards HTTP on iPhones behind a flag

Project Member Reported by emilyschechter@chromium.org, Sep 13 2016

Issue description

Please implement (i) in Omnibox for all HTTP sites on iOS phone behind a flag.

We have a CL out to add this flag: https://codereview.chromium.org/2337103002/

Security UI will compute the logic behind this flag. The logic will be shared across platform. This plan has been OKed by ui review.

iOS Phone only. Not relevant for tablet. For this issue on iOS tablets, see  Issue 535357 .

For background, please see https://bugs.chromium.org/p/chromium/issues/detail?id=535357#c14
 
Cc: emilyschechter@chromium.org
Cc: maxwalker@chromium.org
Cc: justincohen@chromium.org
Labels: M-55
Owner: rohitrao@chromium.org
Status: Assigned (was: Untriaged)
Any concerns that it's getting a little cramped here:
   https://screenshot.googleplex.com/4BfKUZvL8uZ
It's already cramped: Issue 454529

If anything, we should be disincentivizing HTTP by cramping it and working hard towards making HTTPS the unmarked default.
42248655680.png
64.5 KB View Download
Summary: Show ⓘ for HTTP on iPhones behind a flag (was: Show (i) for HTTP on iPhones behind a flag)
Labels: Hotlist-Security-UX-Consistency
FYI - the "cramped" concern is why we are not currently enabling this for all HTTP sites. We are only enabling it for "HTTP Bad" sites. This is a subset of HTTP sites, which starts small and slowly ramps up over time according to a bit we'll pass.

The idea is that by slowly ramping this up over time, we are not overly exposing users to warnings or overly showing the cramped UI. We will however show users a warning at the times when it most matters (HTTP bad will start with password and credit card forms) and we will put pressure on these sites to turn on TLS.

Comment 8 by f...@chromium.org, Sep 16 2016

Labels: Hotlist-HttpBad

Comment 9 by f...@chromium.org, Sep 16 2016

Blocking: 647754
Components: UI>Browser>Omnibox>SecurityIndicators
Components: -Security>UX
Blockedon: 648839 647822 647559
Labels: -M-55 M-57
Owner: lgar...@chromium.org
Repurposing / clarifying that this bug is for the (i) icon on http passwords/credit cards that lgarron is working on for M57. 
Labels: -Pri-2 Pri-1
Cc: linds...@chromium.org
emilyschechter@, the first comment here says "Please implement (i) in Omnibox for all HTTP sites on iOS phone behind a flag." and the bug title is also general.

Do we care about having a flag for showing ⓘ  behind a flag on all HTTP sites yet, or change this but entirely to be about phase 1?
Change this to entirely be about Phase 1.

Thanks!
Status: Fixed (was: Assigned)
Summary: Show ⓘ for passwords/credit cards HTTP on iPhones behind a flag (was: Show ⓘ for HTTP on iPhones behind a flag)
The core logic for this is ready.
Closing this and leaving  Issue 648839  open for credit cards.

Sign in to add a comment