wolfbeast
8198126c39
Be more consistent about decoding IP addresses in PSM.
2020-01-09 21:39:28 +01:00
wolfbeast
f71108680b
Issue #1118 - Part 6: Fix various tests that are no longer correct.
...
The behavior change of document.open() requires these tests to be
changed to account for the new spec behavior.
2019-12-22 23:48:40 +01:00
wolfbeast
fcea217aac
Issue #447 - Update HSTS preload list
2019-11-19 09:46:25 +00:00
wolfbeast
f4cc93fc9e
Issue #1289 - Part 3: Update tests.
2019-11-14 12:17:00 +01:00
wolfbeast
d5a604bb89
Issue #1289 - Part 2: Clear out the preload list except for test
...
domains.
2019-11-14 12:16:21 +01:00
wolfbeast
0a8dff5256
Issue #1289 - Part 1: Add a pref to disable HPKP header processing.
2019-11-14 12:13:54 +01:00
wolfbeast
736d25cbec
Issue #447 - Improve the getHSTSPreloadList script
...
- Use HEAD instead of GET for probe to avoid loading pages
- Reduce retries to 2
- Reduce timeout to 10 s (since we're just getting a HEAD this is royal)
- Identify ourselves to websites as an automated tool
- Improve performance of list merging (O(n^2) was getting too expensive)
- Add a total counter and perform GC every 200 requests
2019-11-09 13:10:23 +01:00
wolfbeast
78e8ad72f9
Issue #447 - Update HSTS preload list.
2019-11-09 11:02:21 +01:00
wolfbeast
6df8aa4953
Issue #1064 - Part 3: Fix notifyObservers() call.
2019-11-04 15:05:23 +01:00
wolfbeast
5f37447acd
Issue #1064 - Part 2: Fix shorthand and services module import.
2019-11-04 15:04:12 +01:00
wolfbeast
c5c44d1207
Merge branch 'master' into certexception-work
2019-11-04 13:31:30 +01:00
wolfbeast
e3c13af976
Properly implement various HSTS states.
...
Previously, HSTS preload list values could be overridden temporarily due
to counter-intuitive behavior of the API's removeState function.
This adds an explicit flag to the API for writing knockout values to
the Site Security Service, with the default resetting to whatever the
preload list state is.
2019-09-05 18:23:12 +02:00
wolfbeast
a63272b530
No issue: Clean up exceptionDialog.js
...
- Fix some quoting, comments and inconsistencies and code style
- Swap manually grabbing service components out for using `Services.*`
2019-08-17 22:33:51 +02:00
wolfbeast
3252e22000
Issue #1064 : Don't get certificate details synchronously.
...
This avoids getting data synchronously on the main thread in an XHR
(which has been deprecated for a long time and _may_ actually be blocked
in our networking) and attempts to be more predictable by always firing
an update request for the dialog from the XHR request handlers.
2019-08-17 22:28:30 +02:00
trav90
fc4dc10d0a
Update HSTS preload list
...
Tag #447
2019-06-26 19:31:51 -05:00
wolfbeast
c7138e3b92
Update HSTS preload list
...
Tag #447
2019-05-28 08:32:43 +00:00
Matt A. Tobin
325b204d26
Issue #1053 - Drop support Android and remove Fennec - Part 1b: Remove MOZ_FENNEC
2019-04-23 15:56:35 -04:00
adeshkp
b10712de87
Remove SecurityUI telemetry.
2019-04-21 13:02:52 -04:00
adeshkp
52be954e59
Fix order of member variables in a couple of initializer lists
2019-03-14 09:52:03 -04:00
trav90
a31b9e067c
Update HSTS preload list
...
Tag #447
2019-01-31 08:50:29 -06:00
Ascrod
a74b093471
Fix check for HSTS when service is disabled.
2019-01-17 18:18:49 -05:00
Ascrod
3afb818f20
Add preference for fully disabling HSTS.
2019-01-16 19:33:09 -05:00
adeshkp
acf1406e0e
Remove a pointless switch after telemetry cleanup
2019-01-14 09:32:12 -05:00
adeshkp
5335681cd2
Telemetry: Remove stubs and related code
2019-01-12 06:20:31 -05:00
trav90
483267ba97
Update HSTS preload list
...
Tag #447
2019-01-02 16:41:46 -06:00
trav90
f0fe6b69db
Update HSTS preload list
...
Tag #447
2018-12-15 17:51:30 -06:00
trav90
3eef7ab260
Update HSTS preload list
...
Tag #447
2018-11-27 07:32:12 -06:00
wolfbeast
d5a1b34c05
Remove AccumulateCipherSuite()
...
This resolves #858
2018-11-08 11:32:49 +01:00
wolfbeast
f42d6c39fe
Remove ancient workaround in client certificate code
...
Apparently a prehistoric server implementation would send a certificate_authorities field
that didn't include the outer DER SEQUENCE tag, so PSM attempted to detect this and
work around it.
This prehistoric server implementation isn't in use anywhere anymore, so this 18-yo
server bug workaround can be removed.
2018-11-02 11:39:21 +01:00
wolfbeast
52b989d535
Make sure nsNSSCertList handling checks for valid certs.
2018-11-02 02:08:44 +01:00
trav90
76825544ff
Update HSTS preload list
...
Tag #447
2018-10-27 07:32:12 -05:00
trav90
b927e0d5ca
Update HSTS preload list
...
Tag #447
2018-10-12 21:07:35 -05:00
wolfbeast
95379e3377
Ensure we got an nsISSLStatus when deserializing in TransportSecurityInfo.
2018-10-04 22:24:52 +02:00
trav90
778b3c4d7e
Update HSTS preload list
...
Tag #447
2018-09-29 08:37:22 -05:00
wolfbeast
347aea437f
Get rid of the incorrect mechanism to remove insecure fallback hosts.
...
This fixes #797 .
2018-09-29 10:09:13 +02:00
trav90
2f64d5eeec
Update HSTS preload list
...
Tag #447
2018-09-11 17:30:37 -05:00
wolfbeast
ab961aeb54
Remove all C++ Telemetry Accumulation calls.
...
This creates a number of stubs and leaves some surrounding code that may be irrelevant (eg. recorded time stamps, status variables).
Stub resolution/removal should be a follow-up to this.
2018-09-03 10:11:38 +02:00
wolfbeast
1425f020c4
Remove support for TLS session caches in TLSServerSocket.
...
This resolves #738
2018-09-01 23:45:10 +02:00
trav90
cc0e6c7ece
Update HSTS preload list
...
Tag #447
2018-08-27 05:43:33 -05:00
wolfbeast
bfc5b53cf9
Fix missed in32->int64 in df85212009
...
Tag #709 .
2018-08-17 19:23:37 +02:00
wolfbeast
26debee733
Reinstate RC4 and mark 3DES weak.
...
Tag #709
2018-08-17 06:39:04 +02:00
wolfbeast
df85212009
Extend {EnabledWeakCiphers} bit field to allow more cipher suites.
...
Tag #709 .
2018-08-17 06:33:23 +02:00
trav90
e79f2ee694
Update HSTS preload list
...
Tag #447
2018-08-01 05:42:29 -05:00
yami
bdcae58fa6
replace "certErrorCodePrefix2" with "certErrorCodePrefix"
2018-07-22 15:29:06 +02:00
trav90
4d358ef73c
Update HSTS preload list
...
Tag #447
2018-07-17 05:53:04 -05:00
wolfbeast
535e9399e6
Remove SSL Error Reporting telemetry
2018-06-29 17:40:01 +02:00
trav90
ba241f0825
Update HSTS preload list
...
Tag #447
2018-06-21 05:29:04 -05:00
wolfbeast
7d3b69729b
Fix SSL status ambiguity.
...
- Adds CipherSuite string with the full suite
- Changes CipherName to be the actual cipher name instead of the (erroneous) full suite like Firefox does.
2018-06-20 19:14:58 +02:00
JustOff
b1ddd8a8af
[PALEMOON] Add missed strings required by page info
2018-06-08 19:10:23 +03:00
Moonchild
306f3865cc
Merge pull request #461 from trav90/HSTS
...
Improve HSTS preload list generation
2018-06-07 15:03:27 +02:00