Overview: Visit an encryptted web page in a browser window. Then click on a link to an ftp site from another non-browser window. This will make the browser window grab focus and then open the ftp link. The encryption lock will still show that the ftp site is encrypted. Clicking on the lock to bring up PSM reports that the the ftp site supports authentication and encrypttion. Steps to Reproduce: 1) Visit an encryptted page. I was able to reproduce this by visiting https://www.musicvideodistributors.com/ 2) Click on an ftp link from a non-browser window. I reproduced this by clicking on an ftp link to ftp://ftp.mozilla.org/ from within ChatZilla and from within an email containing the link. Actual Results: The encryption lock will still show that the ftp site is encrypted. Clicking on the lock to bring up PSM reports that the the ftp site supports authentication and encryption. If you click to view the certificate for the site, it will display the certificate of the encrypted website you were viewing before clicking the ftp link. Expected Results: The lock icon should show that the ftp site is not encrypted. Clicking the lock should not report that the site supports authentication or encryption. It should not show a site certificate. Build Date & Platform: 2001010404 win32-talkback on Windows 98 4.10.1998

junruh/vishy, should this go to crypto?

Crypto

New

Mass changing of product. Browser:Security:Crypto --> PSM 2.0

nsSecureBrowserUI doesn't get a STATE_TRANSFERRING|STATE_IS_DOCUMENT notification for ftp://ftp.mozilla.org This is a bug in the docloader. Changing component to Browser/ Embedding: Docshell

docloader -> rpotts.

Bugs targeted at mozilla1.0 without the mozilla1.0 keyword moved to mozilla1.0.1 (you can query for this string to delete spam or retrieve the list of bugs I've moved)

WFM tried entering the ftp site via the urlbar, dragging links from outside, and clicking links in external apps (AIM and chatzilla). Tried both Mozilla and Firefox.