Skip to content
This repository has been archived by the owner on Dec 11, 2019. It is now read-only.

Improving Visibility to Dev Tools of HTTPS Cert Security Status, Secure TLS Connection, and Secure Resources #1248

Closed
weems opened this issue Apr 4, 2016 · 7 comments
Labels
parity Features which should be supported in Brave since they're supported in other major browsers. sec-low security

Comments

@weems
Copy link

weems commented Apr 4, 2016

So in Chrome, When you click on the green lock (github.com used as an example) and click the details link you are directed to the Security Tab in ChromeDevTools:

  1. Details Link:

secureconnectiondetailslinkinchrome

2. Security Tab in ChromeDevTools:

Security Tab in ChromeDevTools

Here's what happens when you view the Dev Tools Security Tab in Brave:

  1. Observe the Cert Bubble that Doesn't Contain a Details Link which Leads to Dev Tools Security Tab:
    SSL Cert Bubble in Brave
  2. Note that in Brave there is no visibility into the Security Status of the Site's Cert. There is no visibility into the Secure TLS Connection and that the Site is using a 'strong protocol version and cipher suite' like Chrome displays. Nor is there any visibility in Dev Tools to Verify that Secure Resources 'are all served securely'.

Unknowns worth mentioning:

  1. @diracdeltas mentions in add a way to view TLS certificates #1057 that there should be a way to view Raw TLS Certificate. I am not sure how Electron might prevent or need to be modified in order for details of a Site's Certificate Information should be visible to the DevTools window. @bbondy or others please let me know if anything I have written here is non-sensical or needs clarification!

Update: Apparently this is a error with Electron. Filed at the following Issue: electron/electron#5022

@garvankeeley
Copy link
Contributor

+1 from support requests asking for being able to click on lock icon for complete cert info.

@alexwykoff alexwykoff added this to the 1.2.0 milestone Nov 16, 2016
@cndouglas cndouglas added parity Features which should be supported in Brave since they're supported in other major browsers. security labels Dec 9, 2016
@cndouglas
Copy link

+1 from #6116.

@cndouglas
Copy link

I think this was fixed with #2611 and #6157.

@bsclifton
Copy link
Member

@darkdh can you confirm this is fixed?

@darkdh
Copy link
Member

darkdh commented Sep 5, 2017

No, we can only view certificate. We still don't have other detail of security overview.

@cndouglas
Copy link

Which details are missing? Here's what I see with 0.18.26. It looks very similar to the screenshot above:
image

@darkdh
Copy link
Member

darkdh commented Sep 6, 2017

sorry, I might tested with the version <0.18.26
Close the issue as fixed

@darkdh darkdh closed this as completed Sep 6, 2017
@luixxiul luixxiul removed this from the 1.2.0 milestone Sep 6, 2017
@luixxiul luixxiul removed the upstream label Sep 6, 2017
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
parity Features which should be supported in Brave since they're supported in other major browsers. sec-low security
Projects
None yet
Development

No branches or pull requests

8 participants