Spoofing SSL in Firefox 3
As with Firefox 3 release candidate 1 the yellow address bar is gone - the address bar remains white as with regular pages, there is no padlock to see nor any other visual indicator. The only difference between plain text and secured mode is a blueish background around the Favicon icon at the left side of the address bar.
Not only does it look rather unfavorable and somehow unclean, it’s hardly visible (certainly not for about 10% of the color-blind male population… true, the yellow address bar wasn’t better in that respect). But there is no padlock and no other visual indicator that this page is over SSL secured mode. The plain non-secured page looks even better:
[ Read more ]
By subscribing to our early morning news update, you will receive a daily digest of the latest security news published on Help Net Security.
With over 500 issues so far, reading our newsletter every Monday morning will keep you up-to-date with security risks out there.