Re: Network security manager

[Ted Zlatanov]

On Wed, 19 Nov 2014 00:02:58 +0100 Lars Magne Ingebrigtsen <address@hidden> 
wrote: 

LMI> So the user interface problem remains.  We don't want to suddenly start
LMI> asking people stuff while they're doing other stuff, but here we kinda
LMI> need to ask them stuff...

https://en.wikipedia.org/wiki/Infobar is the UI element most web
browsers use today.  We don't have it in Emacs AFAIK.

http://www.w3.org/TR/wsc-ui/#indicators and
http://www.w3.org/TR/wsc-ui/#Robustness are the W3C recommendations on
this topic.  To summarize (but please please please read the document,
it's quite good):

* show identity signal in a consistent visual position where web content
  can't obscure it

* make the identity signal human-readable

* let the user access the extra information like site owner and source
  of trust; optionally expose even more

* have a distinct TLS indicator

* warning, caution, and danger messages should interrupt the user's
  task (if in the foreground)

As I said, there is much more in the document. Of course, Emacs is not
just a web browser, so we must adapt rather than blindly adopt these
guidelines, but I hope we don't ignore them. Should I make a list of
concrete recommendations for EWW and Emacs in general based on that
document?

Ted