Red fill address bar if the website is insecure.

[Clinton H]

1) Ubuntu 19.10
2) Firefox 72
3) When visiting an insecure website, the address bar should be red filled.
4) The lock icon with a red slash is not very noticeable.

[Olivier Tilloy (osomon)]

That's a request for the upstream project. Would you mind filing it at https://bugzilla.mozilla.org/enter_bug.cgi#h=dupes%7CFirefox ?

[Clinton H (49studebaker)]

Created attachment 9127591
insecure_website_alternative.png

User Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:72.0) Gecko/20100101 Firefox/72.0

Steps to reproduce:

Visited an insecure website.

Actual results:

The lock icon with a red slash is not very noticeable.

Expected results:

When visiting an insecure website, the address bar should be red filled.

[Clinton H (49studebaker)]

Created attachment 9127592
insecure_website.png

[Clinton H (49studebaker)]

Reported to Mozilla:

https://bugzilla.mozilla.org/show_bug.cgi?id=1616611

[Olivier Tilloy (osomon)]

Thanks Clinton.

[Gingerbread-man-2 (gingerbread-man-2)]

> Component: Address Bar → Protections UI

Firefox :: Protections UI - "For bugs and feature requests in Firefox’s Anti-Tracking Protections UI such as the Protection Panel and the Protection Report."

Please explain this move. This is about the entirety of the address bar and it doesn't have anything to do with anti-tracking. Even Firefox :: Site Identity would make more sense, even though this extends beyond the padlock.

[Adw-mozilla (adw-mozilla)]

I searched my browser history to find where some recent shield icon work was being done, and it was this component. I considered Site Identity too, but I don't know which is more appropriate. Let's move it to site identity if you object so much then.

[Nhnt11 (nhnt11)]

This kind of change is not something we can ship without a lot of thought and planning due to the impact on the Web. Even changing the lock icon for example is the kind of change that is accompanied by blog posts (e.g. https://blog.mozilla.org/security/2019/10/15/improved-security-and-privacy-indicators-in-firefox-70/).

I'm closing this WONTFIX. If at some point the time comes when we want to be more aggressive about flagging HTTP vs HTTPS, we can open a new bug if we end up deciding coloring the URL bar is the way to go (which we might! but it's not something we can predict now).