New issue
Advanced search Search tips
Note: Color blocks (like █ or █) mean that a user may not be available. Tooltip shows the reason.

Issue 736566 link

Starred by 2 users
Status: Duplicate
Merged: issue 735153
Owner:
█ lgar...@chromium.org
Last visit > 30 days ago
Closed: Jun 2017
Components:
EstimatedDays: ----
NextAction: ----
OS: Mac
Pri: 2
Type: Bug
Team-Security-UX



Sign in to add a comment

Security: Sometimes URL bar address doesn't show "HTTPS" only on Mac

Reported by chromium...@gmail.com, Jun 24 2017 
VERSION
Chrome Version: 61.0.3138.0 (Official Build) canary (64-bit)
Operating System: Mac

REPRODUCTION CASE
1. Open new tab
2. Try to type google.com and enter
Screen Shot 2017-06-24 at 04.37.43.png
31.5 KB View Download
actual.mov
1.6 MB Download

Comment 1 by chromium...@gmail.com, Jun 25 2017 

Still repro on 61.0.3140.0 MAc-only.

Comment 2 by dominickn@chromium.org, Jun 26 2017

Components: UI>Browser>Omnibox>SecurityIndicators
Owner: lgar...@chromium.org
Status: Assigned (was: Unconfirmed)
I can't reproduce this, but it may be an experiment. +lgarron, are there any active experiments with eliding the scheme on desktop for Secure pages?

Comment 3 by dominickn@chromium.org, Jun 26 2017

Labels: Security_Severity-Low Security_Impact-Head OS-Mac Pri-2

Comment 4 by est...@chromium.org, Jun 26 2017

Labels: -Type-Bug-Security -Restrict-View-SecurityTeam -Security_Severity-Low -Security_Impact-Head Type-Bug
Mergedinto: 735153
Status: Duplicate (was: Assigned)
Thanks for the report! This isn't a security vulnerability since we're failing closed in some sense, i.e. just omitting the scheme. (Showing https:// when it's not https would be a security bug.)
►

Sign in to add a comment