1089473 - Unable to "Forget about this site" or otherwise mitigate punctilious HSTS effect

Status: RESOLVED INCOMPLETE

(Firefox for Android Graveyard :: General, enhancement)

Description

[Brian Lalonde]

User Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:33.0) Gecko/20100101 Firefox/33.0
Build ID: 20141011015303

Steps to reproduce:

Visit a site with an overly aggressive HTTP Strict Transport Security policy, that does not actually apply to all content for the domain.


Actual results:

An https: URL scheme is attempted for all sites on the domain, including ones that do not support it. There does not appear to be a way for the user to reset the domain's HSTS status.


Expected results:

There needs to be some UI, somewhere, to allow forgetting the HSTS status for Firefox mobile.

Comment 1

[Gian-Carlo Pascutto [:gcp]]

Desktop does this via History->Forget about this site.

Comment 2

[Brian Lalonde]

To clarify, this bug is about Firefox for Android.

Comment 3

[Gian-Carlo Pascutto [:gcp]]

(In reply to Brian Lalonde from comment #2)
> To clarify, this bug is about Firefox for Android.

You filed it in the right product so that's clear. I pointed out where this sits in desktop to illustrate to our UX that even though we don't have a specific "button" for this, the possibility does exist on non-Android.

Comment 4

[Daniel Veditz [:dveditz]]

Meanwhile the desktop version seems to have regressed (see bug 1119778), but we'll still want this kept separate as an android bug.

Comment 5

[BMO Automation]

We have completed our launch of our new Firefox on Android. The development of the new versions use GitHub for issue tracking. If the bug report still reproduces in a current version of [Firefox on Android nightly](https://play.google.com/store/apps/details?id=org.mozilla.fenix) an issue can be reported at the [Fenix GitHub project](https://github.com/mozilla-mobile/fenix/). If you want to discuss your report please use [Mozilla's chat](https://wiki.mozilla.org/Matrix#Connect_to_Matrix) server https://chat.mozilla.org and join the [#fenix](https://chat.mozilla.org/#/room/#fenix:mozilla.org) channel.