1387428 - Disable TLS 1.3 by default for FF 56

Status: VERIFIED FIXED

(Core :: Security: PSM, defect, P1)

Comment 1

[Liz Henry (:lizzard) (relman/hg->git project)]

This is a reminder that the pref should be disabled before 56 goes to release, because we don't have a way to automatically flip a pref between beta and release.

Comment 2

[Liz Henry (:lizzard) (relman/hg->git project)]

Note, the patch should be the same as for bug 1385927.
Do we need to attach a separate patch for this bug?

Comment 3

[Julien Cristau [:jcristau]]

Attachment: patch for 56

We can just graft over the changeset from 55 when 56 merges to release and just update the commit message, like this.

Comment 4

[Julien Cristau [:jcristau]]

woops didn't mean to self-assign.

Comment 5

[Liz Henry (:lizzard) (relman/hg->git project)]

Ekr, is it OK if we uplift this now and disable for beta 12? (Thursday or Friday release) 
Or do you want to keep this going right up until Tuesday's RC release?

Comment 6

[Eric Rescorla (:ekr)]

I would prefer to keep it as late as possible, but I don't want to inconvenience people if it's a big hassle. I leave it to your discretion.

Comment 7

[Julien Cristau [:jcristau]]

Comment on attachment 8906948 [details] [diff] [review]
patch for 56

This needs to go on m-r before 56.0-build1.

Comment 8

[Ryan VanderMeulen [:RyanVM]]

https://hg.mozilla.org/releases/mozilla-release/rev/11ba91f0565e

Comment 9

[Mihai Boldan, Desktop QA [:mboldan]]

Managed to verify this issue on Firefox 56.0, under Windows 10x64, Ubuntu 16.04x86 and under macOS 10.12. 
Currently TLS 1.2 is set by default on the build under test.