The user story mentions adding "a manual exception for the site". I understood that as "temporarily override the check for the duration of the session". Is that correct, or do we want to set the override forever (or something else)?

The current code shows a modal prompt for setting a permanent exception, but from the mockup I get the impression that this is not what we want.

We had a couple of discussions about this point last week and the consensus was to move forward with the existing modal dialog for the time being (v1) and then use an approach more similar to the mockup (v2). We agreed that it’s important to offer the ability to make these exceptions permanent in the warning notification. April suggested that if we are going to have a persistent warning bar on the screen for sites that have had security exceptions, then that would be the perfect place to offer a link for people to revoke their trust. Bram liked this approach a lot, and has updated his mockup to match: http://brampitoyo.github.io/fx-untrusted-connection/untrusted-connection-warning-ui.png The behaviour is as follows: - When clicking the “Proceed” link, the modal dialogue to add exception doesn’t appear anymore - Instead, we set exception to permanent by default, and load the site that the user wants to load - However, when a site have had security exception, we also show a persistent warning bar that tells user to be careful - This warning bar makes it easy to revoke permanent exception