2

As you know the likes SSL enabled websites is on the increase, mainly because Google is now rewarding sites for being safer to use. Users can view a sites SSL certificate by clicking the secure icon in the address bar, the problem with this is many consumers are unaware what it means, never mind its clickable.

Many sites will use SSL seals on the website which customers are more likely going to understand what it means, rather than a tiny pad lock in the address bar. In my opinion a trust seal should be clickable and bring up information for users, which brings me to the question!

As we have the likes of href="tel:", href="mailto:" and href="fax:" which trigger operating system associated applications...

Question(s):

  • Does any href exist for viewing the SSL of a site exist, or in draft?
  • Is there any known methods asides PHP?

The idea is to allow users to view the SSL Cert from within the browser without having to click the secure icon next to the address. I know this can be done by copying the text and manually importing it into HTML, or use PHP to get the job done, but hoping there is an easier solution.

  • While I agree that many consumers are unaware, training them to rely on certificates displayed on the page would be an exceptionally bad idea. This would be abused even more widely than the silly pictures of padlocks on websites (some used on plain HTTP pages with HTTP form submit!) and this requirement for displaying certs in the browser chrome itself is by design. What is needed is user education, not extra stuff cluttering the page. You can accomplish this with a short message telling users to click the padlock in the address bar to verify connection security - or note when it is absent. – Tom Brossman Jun 5 '16 at 5:45
  • I think it would be useful to create a Uniform Resource Citation (URC) for SSL certificates. URCs point to meta data about a URL rather than to the URL itself. There is a similar URC for viewing the page source: view-source:http://example.com/. I don't believe that any browser has a similar mechanism for SSL certificates. – Stephen Ostermiller Jun 14 '16 at 11:46
1

Not possible unfortunately. The SSL viewer is a native feature of the browser and can not be triggered using a href or in any other way from the page. The site seals you are talking about generally link to another provider which shows the confirmed owner details of the site and that the site is trusted but it is not bringing up SSL information rather it is bringing up site details from the site seal service provider.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.