Bug#671068: iceweasel: Contradicting SSL status reports (favicon lies)

[anonymous coward]

Package: iceweasel
Version: 3.5.16-14
Severity: normal

When visiting https://www.linuxquestions.org, the padlock icon is (rightly) closed, with a bang and a warning about some content being unauthenticated (as it should).  However, when clicking the favicon, the statement "Your connection to this web site is not encrypted".  This is entire contradictory.  It should say that the connection is *partially* encrypted.

This bug may already be fixed in newer versions of firefox.

-- Package-specific info:

-- Extensions information
Name: Default
Location: /usr/lib/iceweasel/extensions/{972ce4c6-7e08-4474-a285-3208198ce6fd}
Package: iceweasel
Status: enabled

Name: HTTPS-Everywhere
Location: ${PROFILE_EXTENSIONS}/https-everywhere at eff.org
Status: enabled

-- Plugins information
Name: DivX® Web Player
Location: /usr/lib/mozilla/plugins/libtotem-mully-plugin.so
Package: totem-mozilla
Status: enabled

Name: QuickTime Plug-in 7.6.6
Location: /usr/lib/mozilla/plugins/libtotem-narrowspace-plugin.so
Package: totem-mozilla
Status: enabled

Name: Shockwave Flash
Location: /usr/lib/gnash/libgnashplugin.so
Package: browser-plugin-gnash
Status: enabled

Name: VLC Multimedia Plugin (compatible Totem 2.30.2)
Location: /usr/lib/mozilla/plugins/libtotem-cone-plugin.so
Package: totem-mozilla
Status: enabled

Name: Windows Media Player Plug-in 10 (compatible; Totem)
Location: /usr/lib/mozilla/plugins/libtotem-gmp-plugin.so
Package: totem-mozilla
Status: enabled

Name: iTunes Application Detector
Location: /usr/lib/mozilla/plugins/librhythmbox-itms-detection-plugin.so
Package: rhythmbox-plugins
Status: enabled


-- Addons package information
ii  browser-plugin 0.8.8-5+squeez GNU Shockwave Flash (SWF) player - Plugin fo
ii  iceweasel      3.5.16-14      Web browser based on Firefox
ii  rhythmbox-plug 0.12.8-3       plugins for rhythmbox music player
ii  totem-mozilla  2.30.2-6       Totem Mozilla plugin

-- System Information:
Debian Release: 6.0.4
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32-5-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages iceweasel depends on:
ii  debianutils                  3.4         Miscellaneous utilities specific t
ii  fontconfig                   2.8.0-2.1   generic font configuration library
ii  libc6                        2.11.3-3    Embedded GNU C Library: Shared lib
ii  libglib2.0-0                 2.24.2-1    The GLib library of C routines
ii  libgtk2.0-0                  2.20.1-2    The GTK+ graphical user interface 
ii  libnspr4-0d                  4.8.6-1     NetScape Portable Runtime Library
ii  libstdc++6                   4.4.5-8     The GNU Standard C++ Library v3
ii  procps                       1:3.2.8-9   /proc file system utilities
ii  xulrunner-1.9.1              1.9.1.16-14 XUL + XPCOM application runner

iceweasel recommends no packages.

Versions of packages iceweasel suggests:
ii  libgssapi-krb5-2    1.8.3+dfsg-4squeeze5 MIT Kerberos runtime libraries - k
pn  mozplugger          <none>               (no description available)
ii  ttf-lyx             1.6.7-1              TrueType versions of some TeX font
pn  ttf-mathematica4.1  <none>               (no description available)
ii  xfonts-mathml       4                    Type1 Symbol font for MathML
pn  xprint              <none>               (no description available)

Versions of packages xulrunner-1.9.1 depends on:
ii  libasound2            1.0.23-2.1         shared library for ALSA applicatio
ii  libatk1.0-0           1.30.0-1           The ATK accessibility toolkit
ii  libbz2-1.0            1.0.5-6+squeeze1   high-quality block-sorting file co
ii  libc6                 2.11.3-3           Embedded GNU C Library: Shared lib
ii  libcairo2             1.8.10-6           The Cairo 2D vector graphics libra
ii  libdbus-1-3           1.2.24-4+squeeze1  simple interprocess messaging syst
ii  libfontconfig1        2.8.0-2.1          generic font configuration library
ii  libfreetype6          2.4.2-2.1+squeeze4 FreeType 2 font engine, shared lib
ii  libgcc1               1:4.4.5-8          GCC support library
ii  libglib2.0-0          2.24.2-1           The GLib library of C routines
ii  libgtk2.0-0           2.20.1-2           The GTK+ graphical user interface 
ii  libhunspell-1.2-0     1.2.11-1           spell checker and morphological an
ii  libjpeg62             6b1-1              The Independent JPEG Group's JPEG 
ii  libmozjs2d            1.9.1.16-14        The Mozilla SpiderMonkey JavaScrip
ii  libnspr4-0d           4.8.6-1            NetScape Portable Runtime Library
ii  libnss3-1d            3.12.8-1+squeeze4  Network Security Service libraries
ii  libpango1.0-0         1.28.3-1+squeeze2  Layout and rendering of internatio
ii  libpng12-0            1.2.44-1+squeeze4  PNG library - runtime
ii  libreadline6          6.1-3              GNU readline and history libraries
ii  libsqlite3-0          3.7.3-1            SQLite 3 shared library
ii  libstartup-notificati 0.10-1             library for program launch feedbac
ii  libstdc++6            4.4.5-8            The GNU Standard C++ Library v3
ii  libx11-6              2:1.3.3-4          X11 client-side library
ii  libxrender1           1:0.9.6-1          X Rendering Extension client libra
ii  libxt6                1:1.0.7-1          X11 toolkit intrinsics library
ii  zlib1g                1:1.2.3.4.dfsg-3   compression library - runtime

-- no debconf information