search

commoncriteria / webbrowser

Protection Profile for Web Browsers
The Unlicense
1 stars 0 forks source link

Discuss visual differentiation between secure and insecure mode #16

Open japit opened 9 years ago

japit commented 9 years ago

Comment received to mandate visual differentiation between secure and insecure mode and to mandate highlighting address bar and displaying additional icon to announce secure browsing.

Opened issue to discuss visual differentiation. Typically there is a lock and color change in modern browsers; however, these visual cues are not security controls.

japit commented 9 years ago

Security concern relates to certificate validity. Rejected visual differentiation. Refer to security concerns addressed in App PP (FIA_X509_EXT.1, FCS_HTTPS_EXT.1, and FCS_TLSC_EXT.1).