[Mozilla Enterprise] Red-barred padlock on HTTPS sites on Firefox ESR 60

Wed Jan 2 12:18:27 UTC 2019

Wait, those fonts are on HTTP not HTTPS. I gather a site requires updating not Firefox.

From: Enterprise [mailto:enterprise-bounces at mozilla.org] On Behalf Of Mike Kaply
Sent: 21 December 2018 16:16
To: marius.tarlo at orange.com
Cc: enterprise at mozilla.org; CHEMINEL Mickael DTSI/DISU
Subject: Re: [Mozilla Enterprise] Red-barred padlock on HTTPS sites on Firefox ESR 60

This wasn't backported because it didn't meet the ESR criteria.

I'll see what I can do.

Mike

On Fri, Dec 21, 2018 at 10:09 AM <marius.tarlo at orange.com<mailto:marius.tarlo at orange.com>> wrote:
Hello,

Yes it seems to be this bug !

We’ve tried once more and we’ve found that it’s related to “woff character fonts”, like in the bug you linked :

[cid:image001.jpg at 01D4A295.44966200]

Shouldn’t this have been fixed in Firefox 61 (and ESR 60.1) ?

Thank you very much

Cordialement / Best regards,
[http://www.orange.com/sirius/logos_mail/orange_logo.gif]<http://www.orange.com/>
Marius TARLO
Maintenance e-buro
FT/SCE/G2S/NRS/NEOCLES
tél. +33 1 42 75 34 25
marius.tarlo at orange.com<mailto:marius.tarlo at orange.com>

De : Mike Kaply [mailto:mkaply at mozilla.com<mailto:mkaply at mozilla.com>]
Envoyé : jeudi 20 décembre 2018 17:48
À : TARLO Marius OBS/OCB
Cc : enterprise at mozilla.org<mailto:enterprise at mozilla.org>; CHEMINEL Mickael DTSI/DISU
Objet : Re: [Mozilla Enterprise] Red-barred padlock on HTTPS sites on Firefox ESR 60

This might be:

https://bugzilla.mozilla.org/show_bug.cgi?id=1420680

When this happens on the page, can you view page info and see if any of the media are http?

Mike

On Thu, Dec 20, 2018 at 10:17 AM <marius.tarlo at orange.com<mailto:marius.tarlo at orange.com>> wrote:
Hello,

We encounter on Firefox ESR 60 the following behavior :

On some intranet sites we browse in HTTPS, Firefox displays a gray padlock barred in red near the address bar (instead of being green), telling us that there is a mixed content issue, whereas :

-       When we check the console, we don’t see any HTTP request, everything is in HTTPS

-       This doesn’t occur on Firefox ESR 52

-       This disappears after a while

We have set the following parameters in a .cfg file called by autoconfig.js :
lockPref("security.mixed_content.block_active_content", false);
lockPref("security.tls.version.min", 1);
lockPref("security.tls.version.max", 4);

Do you have any insight about this ?

Cordialement / Best regards,
[http://www.orange.com/sirius/logos_mail/orange_logo.gif]<http://www.orange.com/>
Marius TARLO
Maintenance e-buro
FT/SCE/G2S/NRS/NEOCLES
tél. +33 1 42 75 34 25
marius.tarlo at orange.com<mailto:marius.tarlo at orange.com>

_________________________________________________________________________________________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc

pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler

a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,

Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.

This message and its attachments may contain confidential or privileged information that may be protected by law;

they should not be distributed, used or copied without authorisation.

If you have received this email in error, please notify the sender and delete this message and its attachments.

As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.

Thank you.
_______________________________________________
Enterprise mailing list
Enterprise at mozilla.org<mailto:Enterprise at mozilla.org>
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit https://mail.mozilla.org/listinfo/enterprise or send an email to enterprise-request at mozilla.org<mailto:enterprise-request at mozilla.org> with a subject of "unsubscribe"

_________________________________________________________________________________________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc

pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler

a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,

Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.

This message and its attachments may contain confidential or privileged information that may be protected by law;

they should not be distributed, used or copied without authorisation.

If you have received this email in error, please notify the sender and delete this message and its attachments.

As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.

Thank you.

________________________________

NTT Fundraising is a trading name of Committed 2 Communications Ltd.
For more information visit www.nttfundraising.co.uk

Unless expressly stated otherwise, this message is confidential and may be privileged. It is intended for the addressee(s) only. Access to this e-mail by anyone else is unauthorised. If you are not an addressee, any disclosure or copying of the contents of this e-mail or any action taken (or not taken) in reliance on it is unauthorised and may be unlawful. If you are not an addressee, please inform the sender immediately. You should carry out your own virus checks before opening any attachment.

Registered Office: 2ND FLOOR PROGRAMME, ALL SAINTS STREET, BRISTOL, BS1 2NB, United Kingdom

Registered In England, Registered Trading Number: 06458746
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.mozilla.org/pipermail/enterprise/attachments/20190102/3fdb0aca/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 24900 bytes
Desc: image001.jpg
URL: <http://mail.mozilla.org/pipermail/enterprise/attachments/20190102/3fdb0aca/attachment.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.gif
Type: image/gif
Size: 1264 bytes
Desc: image002.gif
URL: <http://mail.mozilla.org/pipermail/enterprise/attachments/20190102/3fdb0aca/attachment.gif>