Comment 31 for bug 1029549

Just a quick summary of what was decided about signon-ui's use of QtWebkit: signon-ui will refuse to load any non "https://" URLs; and those URLs which allow the user to navigate away from the OAuth authentication pages will be opened on the default browser.

We currently have just two plugins using "http", Sina and Sohu. Sina also supports "https", so we'll fix that plugin (https://bugs.launchpad.net/bugs/1038871); Sohu doesn't, so unfortunately the plugin will be removed until QtWebkit will be supported by our security team (or Sohu switches to https).