Brian Smith (:briansmith, :bsmith, use NEEDINFO?) Reporter
	Description • 13 years ago

The site identity block looks the same when certificate validation succeeded as it does when certificate validation failed but there was an override. The site identity block should have some kind of indication that an override was used.

Google Chrome shows the broken lock and crossed-out https in this scenerio.

	Johnathan Nightingale [:johnath]
	Comment 1 • 13 years ago

The text in the box differs, to indicate that you verified the identity rather than a CA, but you're right that the identity block itself doesn't. I'm not sure that's a problem, though - the only purpose of a non-EV cert is to verify the domain<->key binding, and the user has taken it upon themselves to do that in this case. Why should primary chrome differ?