Bug 120513

Summary: HTTPS lock icon disappears once a cache manifest is used
Product: WebKit Reporter: M. Biggeleben <matthias.biggeleben>
Component: New BugsAssignee: Nobody <webkit-unassigned>
Status: RESOLVED DUPLICATE    
Severity: Normal CC: ap, mcatanzaro, zan
Priority: P2 Keywords: InRadar
Version: 528+ (Nightly build)   
Hardware: Mac   
OS: OS X 10.8   

M. Biggeleben
Reported 2013-08-30 01:03:28 PDT
Safari shows a lock icon in address bar for secure connections. This icon disappears once the page uses a cache manifest. This irritates sensible end-users. Fails: <!doctype html> <html manifest="signin.appcache"> ... Works: <!doctype html> <html> ... Observations: - The manifest can even be empty. - Doesn't matter if manifest is linked by a relative path or by an absolute path that explicitly uses HTTPS. - Happens for self-signed certs as well as official server certs, so no difference here. We don't know if this is intended behavior or a browser bug. Anyway, it definitely irritates Safari users who already filed a bug in our bugzilla.
Attachments
Alexey Proskuryakov
Comment 1 2013-08-30 10:08:02 PDT
Is this Safari only? Last I tested, this was the case in all browsers that supported application cache. I think that this is a bug, but there are subtleties (such as whether EV certificates should be displayed as such when offline). Tracked by Apple internally as <rdar://problem/11168541>.
Michael Catanzaro
Comment 2 2019-03-24 08:03:17 PDT
There's a new bug report with more detail: *** This bug has been marked as a duplicate of bug 196182 ***
Note You need to log in before you can comment on or make changes to this bug.