[Bug 637649] Re: Single sign on page doesn't look secure

** No longer affects: canonical-identity-provider -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/637649 Title: Single sign on page doesn't look secure To manage notifications about this bug go to: h

[Bug 637649] Re: Single sign on page doesn't look secure

** Changed in: rhythmbox (Ubuntu) Status: New => Triaged -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/637649 Title: Single sign on page doesn't look secure To manage notifications about thi

[Bug 637649] Re: Single sign on page doesn't look secure

** Also affects: rhythmbox (Ubuntu) Importance: Undecided Status: New ** Description changed: - The singe sign on page which appears when I buy software in the Software - Centre doesn't look secure. i can't see anything that indicates it's - going over SSL. I'd be concerned about buying

[Bug 637649] Re: Single sign on page doesn't look secure

Specification updated. ** Changed in: software-center (Ubuntu) Assignee: Matthew Paul Thomas (mpt) => (unassigned) ** Description changed: The singe sign on page which appears when I buy software in the Software Cent

[Bug 637649] Re: Single sign on page doesn't look secure

** Tags removed: buy-software ** Tags added: buying-software -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/637649 Title: Single sign on page doesn't look secure To manage notifications about this b

[Bug 637649] Re: Single sign on page doesn't look secure

** Tags added: buy-software -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/637649 Title: Single sign on page doesn't look secure To manage notifications about this bug go to: https://bugs.launchpad.

[Bug 637649] Re: Single sign on page doesn't look secure

** Changed in: software-center (Ubuntu) Assignee: (unassigned) => Matthew Paul Thomas (mpt) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/637649 Title: Single sign on page doesn't look secure

[Bug 637649] Re: Single sign on page doesn't look secure

** Tags added: client-server -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/637649 Title: Single sign on page doesn't look secure To manage notifications about this bug go to: https://bugs.launchpad

[Bug 637649] Re: Single sign on page doesn't look secure

This needs to be done in the client app. Marking as invalid for sso. ** Changed in: canonical-identity-provider Status: New => Invalid -- Single sign on page doesn't look secure https://bugs.launchpad.net/bugs/637649 You received this bug notification because you are a member of Ubuntu Bu

[Bug 637649] Re: Single sign on page doesn't look secure

** Changed in: canonical-identity-provider Assignee: abubakar (bakarms) => Omer Akram (om26er) ** Changed in: canonical-identity-provider Assignee: Omer Akram (om26er) => (unassigned) -- Single sign on page doesn't look secure https://bugs.launchpad.net/bugs/637649 You received this bu

[Bug 637649] Re: Single sign on page doesn't look secure

** Changed in: canonical-identity-provider Assignee: (unassigned) => abubakar (bakarms) -- Single sign on page doesn't look secure https://bugs.launchpad.net/bugs/637649 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bug

[Bug 637649] Re: Single sign on page doesn't look secure

Also, unless someone can say for sure that the embedded browser would reject non-HTTPS pages or pages with invalid SSL certs, I think this should be marked as a security bug, so doing that. ** This bug has been flagged as a security vulnerability -- Single sign on page doesn't look secure https:

[Bug 637649] Re: Single sign on page doesn't look secure

bug #637649 in the above should have been bug #656419, sorry copy paste error.. -- Single sign on page doesn't look secure https://bugs.launchpad.net/bugs/637649 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing lis

[Bug 637649] Re: Single sign on page doesn't look secure

I woudn't entirely agree that this is a duplicate of bug #637649 since that was reported specifically for the payment page. We users are conditioned (hopefully) to always check SSL info for pages where we enter our credit card details, and I think that for the purposes of the credit card page what

[Bug 637649] Re: Single sign on page doesn't look secure

@mpt I felt the same as Alan, and I like the link (although at bottom) that explain who the payment processor was, inviting me to find out more. Having that link at the top would also help, IMO. -- Single sign on page doesn't look secure https://bugs.launchpad.net/bugs/637649 You received this bu

[Bug 637649] Re: Single sign on page doesn't look secure

In Web browsers showing whether something is secure is the browser's job, because the Web site could fake it (or be mistaken more easily than the browser). I think the same principle should apply here: security should be shown in the chrome, not in the SSO page. An ideal fix will need to wait unti