Nils Ohlmeier [:drno] Reporter
	Description • 10 years ago

If you visited a HTTPS web site before which used the Strict-Transport-Security headers to require HTTPS access to the site in the future, but on revisiting the site Firefox receives a certificate which does not match the site you get the attached error message.

Several engineers in the Mozilla office failed to understand what the problem was in this situation.

1) Right now I can't even look at the cert which is causing the problem, which makes debugging the problem really hard!
2) As Firefox remembers that the page has been visited before and requested STS the error message should include some text indicating something like that: 
"You have visited this site over a securely and trusted connection before with this browser, but right now this connection can not be trusted any more."

	Dana Keeler (she/her) (use needinfo) (:keeler for reviews)
	Comment 1 • 10 years ago

Thanks, Nils. We're pretty close to fixing this, actually :)