New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 795410 link

Starred by 4 users

Issue metadata

Status: Assigned
Owner:
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Chrome
Pri: 3
Type: Bug
Team-Security-UX



Sign in to add a comment

SECURE_WITH_POLICY_INSTALLED_CERT should show meaningful string in Page Info

Project Member Reported by elawrence@chromium.org, Dec 15 2017

Issue description

Long ago, when the page security state was SECURE_WITH_POLICY_INSTALLED_CERT, PageInfo showed a meaningful string to let the user know why they were seeing a little building icon instead of a lock icon.

The old code is present:

      site_identity_status_ = SITE_IDENTITY_STATUS_ADMIN_PROVIDED_CERT;
      site_identity_details_ = l10n_util::GetStringFUTF16(
          IDS_CERT_POLICY_PROVIDED_CERT_MESSAGE, UTF8ToUTF16(url.host()));

...but I don't think this appears anywhere in a current UX. I think we need a change somewhere around https://cs.chromium.org/chromium/src/chrome/browser/ui/page_info/page_info_ui.cc?l=230&rcl=67fee5924741f4ccd5985b4933a042e8a24559d4

Through various refactors, that string is no longer shown, leaving users 
potentially confused about what's going on.

(Note: Long-term, we should get rid of the SECURE_WITH_POLICY_INSTALLED_CERT state entirely and leave it to Chrome OS to notify the user when a policy-cert is installed. But that's a bigger change.)
 

Comment 1 by raymes@chromium.org, Dec 17 2017

Components: UI>Browser>Omnibox>SecurityIndicators
Owner: patricia...@chromium.org
Status: Assigned (was: Untriaged)
patricialor@, could you help triage this issue?

Comment 3 by raymes@chromium.org, Dec 18 2017

Cc: est...@chromium.org
Owner: elawrence@chromium.org
I think this would be best looked at by someone familiar with security states.

Comment 4 by tnagel@chromium.org, Jan 17 2018

Cc: tnagel@chromium.org dskaram@chromium.org atwilson@chromium.org
Components: Enterprise

Comment 5 by tnagel@chromium.org, Jan 30 2018

Components: Privacy
Owner: ----
Status: Available (was: Assigned)
Unfortunately, I won't be able to work on this in the foreseeable future.
Owner: atwilson@chromium.org
For Drew to assign somebody to work on this.
Plan is (I thought) to display session disclosures rather than per-page UX. So effectively we'll do what's suggested as the "long-term plan" in the original report.

Thiemo, thinking of duping this against the disclosure bug - WDYT?

Comment 9 by tnagel@chromium.org, Jun 20 2018

Agreed that the POR is to remove the enterprise icon and show the green lock icon instead. Independent of that I'd consider a string in the page info dialog useful, though. I think a good case can be made for that string, as it's relevant information that's shown in context, exactly at the time that the user is looking for it. (The string could link to the disclosure view.)
Owner: hunyadym@chromium.org
Marton, maybe this can be a piece of the disclosure work your intern picks up.
Status: Assigned (was: Available)
Cc: poromov@chromium.org hunyadym@chromium.org
Owner: raleksandrov@google.com
Labels: Hotlist-Enterprise-Disclosure
Labels: Hotlist-Privacy-Followup

Sign in to add a comment