Skip to content

Conversation

@LukasReschke
Copy link
Member

The security warning is currently being ignored by too many users as it's part of the text and not visually distinct.

Before:
Screenshot 2021-06-22 at 19 19 37

After:
Screenshot 2021-06-22 at 19 20 24

Fixes #26943

The security warning is currently being ignored by too many users as it's part of the text and not visually distinct.

Ref #26944

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
@LukasReschke
Copy link
Member Author

@jancborchardt Any opinions? We received several reports that this is being ignored by users which is bad. (in combination with a targeted phishing attack this could result in an account takeover)

Copy link
Member

@blizzz blizzz left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

bildhübsch.

@blizzz blizzz mentioned this pull request Jun 23, 2021
39 tasks
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
Copy link
Member

@jancborchardt jancborchardt left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good! :)

Btw, one thing which is also distracting is the super weird user agent string. If we simplify/humanize that, it takes away even less focus from the security message.

@nickvergessen
Copy link
Member

Btw, one thing which is also distracting is the super weird user agent string. If we simplify/humanize that, it takes away even less focus from the security message.

So mobile clients and I think also the desktop cheat on this request and show a device name as user agent.

@LukasReschke
Copy link
Member Author

Failures look unrelated.

@LukasReschke LukasReschke merged commit a52ed8e into master Jun 23, 2021
@LukasReschke LukasReschke deleted the better-security-warning branch June 23, 2021 18:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Improve visibility of login flow v2 warning

4 participants