New proxy authentication request behaviour

Originator:calum.h
Number:rdar://29570072 Date Originated:08/12/2016
Status:Open Resolved:
Product:macOS Product Version:10.12.2 16C60b
Classification:UI/Usability Reproducible:Always
 
Summary:
Since 10.2.1, a new behaviour for proxy authentication has been implemented.
Now, a dialog box appears, attached as dialog1.png
This dialog box has two buttons, not now and System Preferences (Default button)
When the user clicks system preferences the system preferences application launches.
Another dialog box appears and requests the users credentials, attached as dialog2.png
When the user enters their credentials into this new dialog box it goes away leaving the Network System preferences pane open.

There seems to be absolutely no need to open the system preferences pane at all on macOS. 

If the user is a standard user account, they do not have access to modify the network system preference anyway, so why open it for them?

This seems to be simply a change of behaviour for no benefit to the end user and simply means more clicks, more windows/dialog boxes and more confusion.

Steps to Reproduce:
1. Install macOS 10.12.1 or higher
2. Configure network settings (Network Proxy via PAC Automatic Proxy Configuration)
3. Create new local standard user account
4. Log in to macOS with new local standard user account
5. macOS attempts to contact iCloud configuration on login.
6. Prompt for proxy authentication is presented

Expected Results:
The request for proxy authentication should not attempt to open system preferences or the network pref pane
The request for proxy authentication should only request the users credentials and allow the requesting application to use these new credentials and continue on in the background as per the 10.2.0 and previous behaviour

Actual Results:
The prompt for proxy authentication opens the network system preference pane
After the user provides the user credentials, the system preferences application is not automatically closed and requires the user to close it.
A standard user account is unable to make any changes to the network system preference pane without admin rights anyway so this irrelevant to them


Version:
10.2.2 16C60b

Notes:
Regression:
Does not occur in 10.12.0
First noticed in 10.12.1.
Still exists in current 10.12.2 beta 16C60b

Screen shots of dialog boxes attached

Comments

Apple Developer Relations15-Dec-2016 03:27 PM

Please know that our engineering team has determined that this issue behaves as intended based on the information provided.

This is intended behavior as part of mitigating an exploit of False CONNECT attacks. We're tracking further improvements with 28290699. The old proxy auth prompt will display after System Preferences is launched.


Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at bugreport.apple.com before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!