Security/Reviews/IdentityBox

Please use "Edit with form" above to edit this page.

Item Reviewed

New Idenity Box Design
Target	Bugzilla query error There was a problem during the HTTP request: 429 Unknown Error

{{#set:SecReview name=New Idenity Box Design |SecReview target=

Bugzilla query error

There was a problem during the HTTP request: 429 Unknown Error

}}

Introduce the Feature

Goal of Feature, what is trying to be achieved (problem solved, use cases, etc)

• We will remove the favicon from the Firefox address bar and replace it with a generic icon in http and mixed content scenarios. Use a grey lock in https, and a green lock in https+ev. The verified domain will be hidden in https. The verified identity will be visible in https+ev.

What solutions/approaches were considered other than the proposed solution?

• current state

Why was this solution chosen?

• to make the state of pages clearer to users

Any security threats already considered in the design and why?

`

Threat Brainstorming

• "Your connection to this website has been encrypted to prevent eavesdropping."
  • That statement makes me very uncomfortable, as encryption doesn't prevent eavesdropping: it attempts to protect a combination of confidentiality and integrity, depending on the algorithms chosen. I think this is an important distinction, not a pedantic argument, as it can lead users to assume a false level of security. I'm not sure what the right words to use are - a different question - but I believe that these are not it. If we change this, it's something we'll want to do a blog post explaining. - adamm
    • Examples:
    • http://www.newscientist.com/article/dn14124-compressed-web-phone-calls-are-easy-to-bug.html
    • http://blog.ioactive.com/2012/02/ssl-traffic-analysis-on-google-maps.html
    • http://freehaven.net/anonbib/cache/hintz02.html
  • Out of scope for this review, the Larry dialog is a separate effort.

{{#set: SecReview feature goal=* We will remove the favicon from the Firefox address bar and replace it with a generic icon in http and mixed content scenarios. Use a grey lock in https, and a green lock in https+ev. The verified domain will be hidden in https. The verified identity will be visible in https+ev. |SecReview alt solutions=* current state |SecReview solution chosen=* to make the state of pages clearer to users |SecReview threats considered=' |SecReview threat brainstorming=* "Your connection to this website has been encrypted to prevent eavesdropping."

• • That statement makes me very uncomfortable, as encryption doesn't prevent eavesdropping: it attempts to protect a combination of confidentiality and integrity, depending on the algorithms chosen. I think this is an important distinction, not a pedantic argument, as it can lead users to assume a false level of security. I'm not sure what the right words to use are - a different question - but I believe that these are not it. If we change this, it's something we'll want to do a blog post explaining. - adamm
    • Examples:
    • http://www.newscientist.com/article/dn14124-compressed-web-phone-calls-are-easy-to-bug.html
    • http://blog.ioactive.com/2012/02/ssl-traffic-analysis-on-google-maps.html
    • http://freehaven.net/anonbib/cache/hintz02.html
  • Out of scope for this review, the Larry dialog is a separate effort.

}}

Action Items

Action Item Status	Complete
Release Target	`
Action Items
<td[DONE] done Who bug Action By When Completed date [NEW] new [DONE] Done [MISSED] Miss UX bug 747093 A blog post about how moving the display of favicon.ico from the area supplying trusted information from the browser, to the tab, protects users. during Beta [DONE] done jaws bug 747090 Change the icon for mixed content by Beta for FF 14 [DONE] done jaws bug 747088 Don't include https:// in the mixed content case by FF15, or sooner if possible. [DONE] done jaws bug 747087 Make the https:// black (to match the domain color) in the https non-ev case by FF15 [DONE] done jaws bug 747085 Make the https: green in the https ev case by FF15 (not a security requirement) [DONE] done jaws bug 747083 Make the lock icon darker for the non-ev case by FF15 Bugzilla query error There was a problem during the HTTP request: 429 Unknown Error

{{#set:|SecReview action item status=Complete

|Feature version=`

|SecReview action items=

<td[DONE] done

Who	bug	Action	By When	Completed date [NEW] new [DONE] Done [MISSED] Miss
UX	bug 747093	A blog post about how moving the display of favicon.ico from the area supplying trusted information from the browser, to the tab, protects users.	during Beta	[DONE] done
jaws	bug 747090	Change the icon for mixed content	by Beta for FF 14	[DONE] done
jaws	bug 747088	Don't include https:// in the mixed content case	by FF15, or sooner if possible.	[DONE] done
jaws	bug 747087	Make the https:// black (to match the domain color) in the https non-ev case	by FF15	[DONE] done
jaws	bug 747085	Make the https: green in the https ev case	by FF15 (not a security requirement)	[DONE] done
jaws	bug 747083	Make the lock icon darker for the non-ev case	by FF15

Bugzilla query error

There was a problem during the HTTP request: 429 Unknown Error

}}