(no commit message)

diff --git a/enabling_client_certificate_auth_in_chrome.html b/enabling_client_certificate_auth_in_chrome.html
index 5bd34d258009e26bdb26813108c79d6fcc10a199..697348fd140994c368a43b0a174b45db3f1ef2fa 100644 (file)
--- a/enabling_client_certificate_auth_in_chrome.html
+++ b/enabling_client_certificate_auth_in_chrome.html
@@ -16,12 +16,6 @@ install it on Firefox; at that point, it should be in the list of certificates
 you get when you run "certutil -d sql:$HOME/.pki/nssdb -L".  If not, go back to
 the LinuxCertManagement page and do it manually.</p>
 
-Here's the last key to the puzzle: by default, Chrome on Linux runs without SSL
-client cert auth.  So run it with the --auto-ssl-client-auth flag.  You'll
-probably want to edit both Preferred Applications and the Main Menu entry (I'm assuming you run Gnome here; if not, there may be other things you want to edit) to
-reflect this, so links you click on outside of Chrome open this way.  (Gnome Do
-and similar pull their data from Main Menu, among other places.)  Once you've
-done this, you can check your work with
-<a href="https://scripts-cert.mit.edu/~geofft/demo/detect.php">this demo page</a>.  If everything is
-working, it should welcome you by name, and tell you that a certificate for
-your username is installed.
+<p>Here's the last key to the puzzle: Chrome on Linux currently lacks a UI for selecting a certificate, so run it with the --auto-ssl-client-auth flag. Enabling this flag configures Chrome to automatically send an certificate to websites without prompting, as Firefox will do under certain configurations. This is considered a privacy issue; see UI notes #3 in the Chromium <a href="http://dev.chromium.org/developers/design-documents/ssl-client-authentication">design document</a> and the linked <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=295922">Mozilla bug</a>. Bug <a href="http://code.google.com/p/chromium/issues/detail?id=25241">#25241</a> tracks this issue in Chrome on Linux.</p>
+
+<p>You'll probably want to edit both Preferred Applications and the Main Menu entry (I'm assuming you run Gnome here; if not, there may be other things you want to edit) to reflect this, so links you click on outside of Chrome open this way.  (Gnome Do and similar pull their data from Main Menu, among other places.)  Once you've done this, you can check your work with <a href="https://scripts-cert.mit.edu/~geofft/demo/detect.php">this demo page</a>.  If everything is working, it should welcome you by name, and tell you that a certificate for your username is installed.</p>