Skip to content
This repository has been archived by the owner on Nov 6, 2023. It is now read-only.

When downgrade rules are appropriate #7717

Closed
ghost opened this issue Nov 30, 2016 · 7 comments
Closed

When downgrade rules are appropriate #7717

ghost opened this issue Nov 30, 2016 · 7 comments
Labels

Comments

@ghost
Copy link

ghost commented Nov 30, 2016

Continuing discussion in #7646, when is it appropriate to use downgrade rules. Downgrade rules should be whitelisted, showing that they should be avoided if possible, however it's not clear when they are allowed.

For instance, are they allowed to:

  1. Avoid 404 error?
  2. Avoid invalid certificate?
  3. Avoid redirect to a wrong page?
  4. Avoid broken page UX if mixed content blocking is enabled?
  5. Avoid broken page functionality if mixed content blocking is enabled?
  6. Avoid broken page UX even if mixed content blocking is disabled?
  7. Avoid broken page functionality even if mixed content blocking is disabled?
@jeremyn
Copy link
Contributor

jeremyn commented Nov 30, 2016

Pinging @fuglede @gloomy-ghost @Hainish @J0WI .

@jeremyn
Copy link
Contributor

jeremyn commented Dec 1, 2016

I want to note here that @smw-koops was nice enough to remove their downgrade from pull request #7646 so we could move forward with it while this discussion is happening.

@J0WI
Copy link
Contributor

J0WI commented Feb 11, 2017

From a technical aspect they are appropriated whenever a (protocol) relative link does not behavior the same on https than on http.
I don't know if there are any scenarios with mixed content, I think most will hit point 2.

@J0WI
Copy link
Contributor

J0WI commented Apr 3, 2017

I think we can get rid of downgrade rules anyway, see #8833.

@jeremyn
Copy link
Contributor

jeremyn commented Apr 4, 2017

Getting rid of all of them is the best solution if possible.

@Hainish
Copy link
Member

Hainish commented May 5, 2017

Thanks @J0WI @jeremyn. Can I close this?

@jeremyn
Copy link
Contributor

jeremyn commented May 5, 2017

I think this issue can be closed. Maybe another should be opened by someone, sometime, to remove the technical ability to create downgrades at all, and remove any related documentation too.

@J0WI J0WI closed this as completed May 8, 2017
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
Projects
None yet
Development

No branches or pull requests

3 participants