Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: Improved Security and Privacy Indicators in Firefox 70

4 Weeks Ago   #1

64-bit Windows 10 Pro
Improved Security and Privacy Indicators in Firefox 70

The upcoming Firefox 70 release will update the security and privacy indicators in the URL bar.

In recent years we have seen a great increase in the number of websites that are delivered securely via HTTPS. At the same time, privacy threats have become more prevalent on the web and Firefox has shipped new technologies to protect our users against tracking.

To better reflect this new environment, the updated UI takes a step towards treating secure HTTPS as the default method of transport for websites, instead of a way to identify website security. It also puts greater emphasis on user privacy.

This post will outline the major changes to our primary security indicators:
  • A new permanent “protections” icon to access information about the restrictions Firefox is applying to the page to protect your privacy.
  • A new crossed-out lock icon as indicator for insecure HTTP and a new color for the lock icon that marks sites delivered securely.
  • A new placement for Extended Validation (EV) indicators.
Streamlining Security and Identity Indicators

Firefox traditionally marked sites delivered via a secure transport mechanism with a green lock icon. Sites delivered via insecure mechanisms got no additional security indicators. All sites were marked with an “information” icon, which served as an access point for more site information.

As part of the changes in Firefox 70, we will start showing a crossed-out lock icon as permanent indicator for sites delivered via the insecure protocols HTTP and FTP. Over two years ago, we started showing this indicator for insecure login pages. We also announced our intent to expand by showing a negative indicator for all HTTP pages as HTTPS adoption increases. By now, Firefox loads about 80% of pages via HTTPS.

The formerly green lock icon will now become gray, with the intention of de-emphasizing the default (secure) connection state and instead putting more emphasis on broken or insecure connections.

We will remove the “information” icon. The lock icon will be the new entry point for accessing security and identity information about the website.

Moving the EV indicator out of the URL Bar

A recent study by Thompson et al. shows that the display of the company name and country in the URL bar when the website is using an Extended Validation TLS certificate does not add any additional security parameters. One of the biggest downsides with this approach is that it requires the user to notice the absence of the EV indicator on a malicious site. Furthermore, it has been demonstrated that EV certificates with colliding entity names can be generated by choosing a different jurisdiction.

As a result, we will relocate the EV indicator to the “Site Information” panel that is accessed by clicking on the lock icon. This change will hide the indicator from the majority of our users while keeping it accessible for those who need to access it. It also avoids ambiguities that could previously arise when the entity name in the URL bar was cut off to make space for the URL.

Adding a new Protections Icon

The protections icon will be the entry point for the privacy properties of every page. It lets the user know about trackers or cryptominers on the page and how Firefox restricts them to improve privacy and performance. The icon will have 3 different states.

Protections Enabled
When no tracking activity is detected and protections are not necessary, the shield shows in grey.

Protections Active
When protections are active on the current page, the shield displays a very subtle animation and adopt the purple gradient.

Protections Disabled
When the user has disabled protections for the site, the shield shows with a strike-through.

We are excited to roll out this improved new UI and will continue to evolve the indicators to give Firefox users an easy way to assess their privacy and security anywhere on the modern web.

A big thank you to all the individuals that contributed to this effort.

Source: Improved Security and Privacy Indicators in Firefox 70 | Mozilla Security Blog

My System SpecsSystem Spec
4 Weeks Ago   #2

W7 Ultimate 32-bit

Hummph....there are already extensions for that, NoScript, NoMiner and HTTPS Everywhere, I hope this move won't lock me out of some of my favourite sites with false flags.
My System SpecsSystem Spec
4 Weeks Ago   #3

Windows 7 ULTIMATE (SP1)(x64)

It looked better when the lock icon was colored green... Firefox really is going down the toilet...
My System SpecsSystem Spec

4 Weeks Ago   #4
blue skies

Windows 7 Home Premium 64 bit

I tend to dislike most any kind of change in general, but these changes seem sensible. I don't have a problem with Firefox making their browser more secure by default. It doesn't seem like these changes would lock users out of any sites, but rather just make it more clear (and easier to notice) whether or not the site is secure.
My System SpecsSystem Spec
3 Weeks Ago   #5

Win 7 Ult 64-bit

"because your privacy is very important to us..."
Already have HTTPS Everywhere, and to keep Mozilla telemetry locked out, I've switched to Waterfox.
My System SpecsSystem Spec

 Improved Security and Privacy Indicators in Firefox 70

Thread Tools

Similar help and support threads
Thread Forum
Online security 101: How to protect your privacy
Read more: Online security 101: How to protect your privacy from hackers, spies, and the government | ZDNet
Most home routers do not take advantage of Linux's improved security
Read more: Most home routers don't take advantage of Linux's improved security features | ZDNet
Evolving security indicators for Google Chrome
Guest OS security and Privacy
Now that my plotter problems are solved I am concerned with the guest OS (XP Home SP2) security and privacy. I think I am right that my Win7 anti virus will not protect my XP. I tried to download AVG free through XP but it said I couldn't download the file. The alternative is to download to Win7...
Please could you check my Security/Privacy
Hi I wondered if you could advise me about I.T Security. I have just started looking into Security and Privacy, and I'm trying to make my system as secure as possible whilst still being able to use it without locking it up so to speak. I was looking at VPNUK this looks really good for a...
System Security

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 19:38.
Twitter Facebook