New issue
Advanced search Search tips

Issue 693884 link

Starred by 3 users

Issue metadata

Status: WontFix
Owner: ----
Closed: Feb 2017
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux , Windows , Chrome , Mac
Pri: 2
Type: Bug
Team-Security-UX



Sign in to add a comment

New "Secure" label devalues EV certificates

Reported by macka...@gmail.com, Feb 18 2017

Issue description

UserAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/602.4.8 (KHTML, like Gecko) Version/10.0.3 Safari/602.4.8

Steps to reproduce the problem:
1. Open this screenshot https://twitter.com/josephfcox/status/832853549851803648
2. Ask a novice user which page is a fraud

What is the expected behavior?
All users should be able to identify the better EV certificate.

What went wrong?
I asked a few people, they think the site labelled "Secure" is the right one. Maybe the label "Secure" is a bit too much.

Did this work before? N/A 

Chrome version: 56.0.2924.87 (64-bit)  Channel: stable
OS Version: OS X 10.12.3
Flash Version: 

Maybe think of something to add value to OV certificates, for instance show the extra data that's been verified. As DV/OV have always looked exactly the same as DV certificates, there's no value in them.

 

Comment 1 by meh...@chromium.org, Feb 19 2017

Components: -UI UI>Browser>Omnibox>SecurityIndicators
Labels: Needs-Triage-M56
Components: Internals>Network>Certificate
Labels: -Needs-Triage-M56 M-58
Status: Untriaged (was: Unconfirmed)
Marking it as Untriaged to get more inputs from dev team.

Thanks,
Cc: emilyschechter@chromium.org
Labels: OS-Chrome OS-Linux OS-Windows
Emily: I think this is just a WontFix as part of the acknowledged design; do you see anything actionable here that warrants revisiting?
Status: WontFix (was: Untriaged)
Yes, this is a WontFix as part of the acknowledged design. We chose the string "secure" based on extensive user research.

Sign in to add a comment