[Bug 47154] Auth dialog requested for captive portal certificate

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=47154

--- Comment #1 from Simon McVittie <simon.mcvittie at collabora.co.uk> ---
> - I should never get an auth client dialog for a certificate which doesn't
> come from the XMPP server itself

How would we tell? We're sending TCP to port 443 on Google's server, and
getting reply packets that claim to be from Google's server and contain a SSL
handshake...

> - After I dismiss the dialog (with Continue IIRC) I get it again and again
> after a bit, since obviously I am not really connected to any public network
> and connection keeps failing.

This could be addressed by making Mission Control not retry if the reason for
disconnection is a certificate error. 5.15 might already make this better.

> - I think ideally I should never ever get an auth dialog like that at all for
> GOA accounts (it's OK to get it if I'm connecting to a home/local/LUG server,
> but never for Google or Windows Live)

How would we achieve that? Do you think there should be a "silently reject
untrusted certs" flag on "big-name brand" GOA-backed accounts (which
empathy-auth would respect), or something?

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
You are the assignee for the bug.