Jack wrote:

>>> When I got the popup window due to 401 in 1.0.x, it used to indicate
>>> whether it was http versus https.  1.5 does not seem to indicate this
>>> as 1.0.x did. Is this intentional?

>> This is a problem because one can't tell whether redirection occured or
>> not and so one can't be sure that one is sending the user name and
>> password over a secure channel.
>>
>> Is there a settings to enable display of the protocol (http v. https) as
>> well?

I posted https://bugzilla.mozilla.org/show_bug.cgi?id=320851 about this.
If true, this seems like a significant security regression to me.

I gather the problem was being reported against linux, and reported it
against the linux version.  If some other version is involved, please
correct that bug report.

--
Nelson B
_______________________________________________
Mozilla-security mailing list
Mozilla-security@mozi...
http://mail.mozilla.org/listinfo/mozilla-security