New issue
Advanced search Search tips

Issue 844506 link

Starred by 1 user
Status: WontFix
Owner:
rsleevi@chromium.org
Closed: May 2018
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux , Windows
Pri: 2
Type: Bug



Sign in to add a comment

Chrome blocks US Military website.

Reported by m22tanker@gmail.com, May 18 2018 
UserAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.181 Safari/537.36

Steps to reproduce the problem:
The following URL is to the US Navy Blue Angels. Chrome thinks it unsafe. I contacted them and they told me "Unfortunately, because our server is behind DoD firewalls, there's nothing we can do to reconcile the certificates with many browsers". Is there any way to get this site marked as safe?
https://www.blueangels.navy.mil/show/

What is the expected behavior?
Should be able to go to military website without getting the Unsafe error message

What went wrong?
Chrome blocks access to military website.

Did this work before? N/A 

Chrome version: 66.0.3359.181  Channel: stable
OS Version: 10.0
Flash Version:

Comment 1 by metzman@chromium.org, May 18 2018

Components: Internals>Network>Certificate
Labels: -Type-Bug-Security -Restrict-View-SecurityTeam OS-Linux Type-Bug
Owner: rsleevi@chromium.org
Status: Assigned (was: Unconfirmed)
Thank you for the report, I was able to reproduce this. 

I think this issue is a possible duplicate of  issue 835043 .

Reclassifying this as a non-security bug since not being able to access a site isn't a security issue for Chrome.

rsleevi@ can you please take a look or suggest a better owner?

Comment 2 by rsleevi@chromium.org, May 18 2018

Status: WontFix (was: Assigned)
Not quite the same bug, but it's correct that Chrome does not trust the DoD root on a number of platforms, so it's no different than using a self-signed certificate. The warning is a correct warning.

Comment 3 by m22tanker@gmail.com, May 19 2018 

Is there any way I can allow permanent access to .mil websites without getting the warning? Firefox has a feature like that. Would be nice if Chrome did too.

Comment 4 by rsleevi@chromium.org, May 20 2018 

That's a very insecure option, and there are no plans to offer that type of override. You can find instructions on how to install the DoD roots from the DoD.
►

Sign in to add a comment