Chris Thompson

To try to clarify the different Mixed Content cases as I see it: - If the main frame is HTTPS (either explicitly or via HTTPS Upgrades succeeding), then Upgradeable mixed...

Thanks for all the help with editing this Yoav! @annevk I think this PR should be in a good place now if you have time to take a look.

I'm not sure why the CI build is failing -- the bikeshed error `FATAL ERROR: Spurious / in <a>` isn't reproducible when running `make local` locally.

Pinging again -- let us know if there are any remaining concerns.

One question that came up when we were working on this proposal was how to define the "upgrade" and "fallback" steps. In Chrome, these are implemented as internal redirects similar...

Unfortunately we can't add test cases that violate the BRs, as the public site requires publicly trusted certs and we can't convince CAs to misissue certificates for us ;-) That...

I do generally try to recommend against relying on BadSSL.com for automated CI (it is just a single small nginx instance maintained in spare time), although I know that even...

We should be able to add this to our automated renewal scripts. I'll take a look.

Apologies for the long-expired cert here. The revoked test case was particularly painful to renew because we previously were manually issuing and revoking it, and then manually adding it to...

I think Firefox is currently experimenting with upgrading mixed content. I'm not sure what the state of that is though, but it's possible that caused upgrades to occur. What behavior...