Closed Bug 1086556 Opened 10 years ago Closed 10 years ago

Use HTTPS instead of HTTP for Gravatar in Loop/Hello

Categories

(Hello (Loop) :: Client, defect, P2)

Product:
Hello (Loop)
Component:
Client
Platform:
x86_64
Windows 8.1
Type:
defect

Tracking

(Not tracked)

Status:
RESOLVED DUPLICATE of bug 1069962
Blocking Flags:
backlog backlog+

People

(Reporter: eldmannen+mozilla, Unassigned)

References

Details

(Whiteboard: [gravatar])

User Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:36.0) Gecko/20100101 Firefox/36.0 Build ID: 20141021030208 Steps to reproduce: about:config Actual results: loop.CSP contains http://www.gravatar.com/ Expected results: Gravatar should be over HTTPS
Blocks: 771788
Component: Untriaged → Client
Product: Firefox → Loop
QA Contact: anthony.s.hughes
Version: 36 Branch → unspecified
backlog: --- → Fx34?
Current target for gravatar support is Fx36 (we need to add UX to ask permission of the user to use gravatars).
backlog: Fx34? → Fx36?
backlog: Fx36? → Fx36+
Status: UNCONFIRMED → NEW
Ever confirmed: true
This isn't really an issue with the CSP per se; it's an issue with the Gravitar code, around which the CSP was crafted. At this point, changing the CSP would just break things. The underlying code needs to be updated to use https, and the CSP needs to be updated to match, in that same patch.
Summary: Use HTTPS instead of HTTP in CSP for Gravatar → Use HTTPS instead of HTTP for Gravatar in Loop/Hello
blocked waiting for UX for gravatar notifification
backlog: Fx36+ → Fx38?
Rank: 24
Priority: -- → P2
backlog: Fx38? → backlog+
Flags: firefox-backlog+
Whiteboard: [gravatar]
Depends on: 1069962
Rank: 24 → 29
We addressed this in bug 1069962 when re-enabling Gravatar support for keeps.
Status: NEW → RESOLVED
Closed: 10 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.