New issue
Advanced search Search tips

Issue 692277 link

Starred by 2 users

Issue metadata

Status: Archived
Owner: ----
Closed: Sep 13
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: All
Pri: 3
Type: Bug
Team-Security-UX

Blocked on:
issue 692276



Sign in to add a comment

Remove security_bits from SecurityInfo and VisibleSecurityState

Project Member Reported by lgar...@chromium.org, Feb 14 2017

Issue description

Possibly also net::SSLInfo?
 
Lucas, do you have any more context about this? Looks like PageInfo uses |security_bits| so I'm not sure how we can get rid of it / with what we should replace those checks.
I assume the idea here is that we only needed this when we would frown on weak crypto (e.g. 56 bit suites) instead of blocking it completely. These days, we only have two states ("We don't know how many bits the crypto is" and "We are satisfied with the number of bits the crypto is") and the former completely overlaps the latter.
The current calculations don't rely on security bits, only cipher suite values.

It should be easy to remove security_bits from Page Info after https://chromium-review.googlesource.com/c/chromium/src/+/575835 lands. That CL still needs a UI test for Android.

Comment 4 by est...@chromium.org, Nov 10 2017

Labels: Hotlist-EnamelAndFriendsFixIt

Comment 5 by est...@chromium.org, Feb 18 2018

Labels: -Hotlist-EnamelAndFriendsFixIt
Status: Archived (was: Available)
Archiving old bugs that haven't been actively assigned in over 180 days.

If you feel this issue should still be addressed, feel free to reopen it or to file a new issue. Thanks!
Archiving old bugs that haven't been actively assigned in over 180 days.

If you feel this issue should still be addressed, feel free to reopen it or to file a new issue. Thanks!

Sign in to add a comment