According to 6.3.3 Reconnecting to a presentation of Presentation API spec https://www.w3.org/TR/2016/CR-presentation-api-20160714/#reconnecting-to-a-presentation, when the request URL is HTTPS, it should reject reconnect request with a SecurityError and abort. STR: 1. Set presentation request URL to a HTTPS address 2. Launch presentation 3. close presentation 4. Reconnect Expected Behavior: Reject with a SecurityError Actual Behavior: Successful Reconnect

(In reply to Teri Wen [:twen] from comment #0) > According to 6.3.3 Reconnecting to a presentation of Presentation API spec > https://www.w3.org/TR/2016/CR-presentation-api-20160714/#reconnecting-to-a- > presentation, when the request URL is HTTPS, it should reject reconnect > request with a SecurityError and abort. > > STR: > 1. Set presentation request URL to a HTTPS address > 2. Launch presentation > 3. close presentation > 4. Reconnect > > Expected Behavior: > Reject with a SecurityError > > Actual Behavior: > Successful Reconnect This has been already implemented in bug 1254488. I would like to mark this bug as duplicated. Fee free to reopen if you find any issue. Thanks.