Ubuntu Documentation

help.ubuntu.com mixes encrypted and unencrypted content

Bug #298243 reported by quazgar
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Ubuntu Documentation
Fix Released
Medium
Matthew East

Bug Description

Not sure if this counts as a usability bug:

help.ubuntu.com is accessed via https (which is a good thing) but embeds the google search as unencrypted, which causes browser warnings (which is good, so I think most people will be unwilling to disable that warning). Having one annoying warning on each new help site makes even security-conscious users disable the (normally useful) warning.

I hope this can be fixed somehow.

Revision history for this message
Adi Roiban (adiroiban) wrote :

This is a very important bug.

People with basic computer skill will not know what is wrong and they will think the documentation page is broken

Matthew East (mdke)
Changed in ubuntu-doc:
assignee: nobody → mdke
importance: Undecided → Medium
status: New → Confirmed
Revision history for this message
Matthew East (mdke) wrote :

I have committed a partial fix for this to our repository, so that the regular help pages will not have this error. It should be pushed to the website shortly.

Unfortunately, this problem is quite difficult to resolve on the search page itself, because all the content comes from Google. Google are apparently working on it:

http://groups.google.com/group/google-custom-search-cse-and-your-site/browse_thread/thread/b06fc51e3ac168bc

Changed in ubuntu-doc:
status: Confirmed → Fix Committed
Revision history for this message
markor (markoresko) wrote :

I think that this bug is help.ubuntu.com`s problem, not Google.com problem.
Maybe displaying search results should be done in a way that no google script/content
is displayed to a user?

Also if connection to google is encrypted it does not solves the problem
because problem with using more then one security certificate, other then ubuntu.com,
will arise.
help,ubuntu.com should use only ubuntu.com security certificates.

Searching google for search results should be done internally on server, not on user computer,
this way 3-4 problems will be eliminated in one stroke (search engine, security warning, ssh certificates, cross-site scripting, control over the way results are displayed)

Revision history for this message
markor (markoresko) wrote :
Revision history for this message
Matthew East (mdke) wrote :

The fix has been pushed to the website, so that the error message should now not show up in the vast majority of situations.

Changed in ubuntu-doc:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.