{"action":"opened","issue":{"url":"https://api.github.com/repos/piwik/piwik/issues/7619","labels_url":"https://api.github.com/repos/piwik/piwik/issues/7619/labels{/name}","comments_url":"https://api.github.com/repos/piwik/piwik/issues/7619/comments","events_url":"https://api.github.com/repos/piwik/piwik/issues/7619/events","html_url":"https://github.com/piwik/piwik/issues/7619","id":65832155,"number":7619,"title":"UX for update failures over HTTPS","user":{"login":"joepie91","id":1663259,"avatar_url":"https://avatars.githubusercontent.com/u/1663259?v=3","gravatar_id":"","url":"https://api.github.com/users/joepie91","html_url":"https://github.com/joepie91","followers_url":"https://api.github.com/users/joepie91/followers","following_url":"https://api.github.com/users/joepie91/following{/other_user}","gists_url":"https://api.github.com/users/joepie91/gists{/gist_id}","starred_url":"https://api.github.com/users/joepie91/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/joepie91/subscriptions","organizations_url":"https://api.github.com/users/joepie91/orgs","repos_url":"https://api.github.com/users/joepie91/repos","events_url":"https://api.github.com/users/joepie91/events{/privacy}","received_events_url":"https://api.github.com/users/joepie91/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-04-02T04:14:55Z","updated_at":"2015-04-02T04:14:55Z","closed_at":null,"body":"As requested, a separate issue. In #6441, the following screenshot was posted of the UX for a failed update attempt over HTTPS:\r\n\r\n![](https://cloud.githubusercontent.com/assets/720328/6702900/acf61fec-cd97-11e4-9ded-a51a9ee42cd9.png)\r\n\r\n... however, all the buttons are red and barely distinguishable - this is likely to lead to the user making a wrong (unsafe) choice. A UX change is critically needed here.\r\n\r\nSuggested solution:\r\n\r\n1. __Update Automatically using HTTPS__ and __Continue to Piwik__ should be either green, or a neutral color (such as light grey).\r\n2. __Update Automatically using non-secure HTTP__ should remain red, as it is now.\r\n3. __Update Automatically using non-secure HTTP__ should be moved to the end of the button list, as the last option.\r\n\r\nThe above makes the unsafe options unattractive to users, and will make them think twice before using them. More on this can be found in [this presentation from the Google Chrome security team](https://docs.google.com/presentation/d/1TNFx6eaQVfe83PV80-FZ39QY1dSLGCWW8f2i5-NeJ48/edit)."}}