1133187 - Fallback whitelist update: mid-February 2015

Status: RESOLVED FIXED

(Core :: Security: PSM, defect)

Description

[Masatoshi Kimura [:emk]]

Attachment: update_whitelist

I would like to land this before the next merge.

Comment 1

[Masatoshi Kimura [:emk]]

Attachment: update_whitelist

Added sites from bug 1124039 blockers.

Comment 2

[Dana Keeler (she/her) (use needinfo) (:keeler for reviews)]

Comment on attachment 8565392 [details] [diff] [review]
update_whitelist

Review of attachment 8565392 [details] [diff] [review]:
-----------------------------------------------------------------

r=me

Comment 3

[Dana Keeler (she/her) (use needinfo) (:keeler for reviews)]

Comment on attachment 8565392 [details] [diff] [review]
update_whitelist

Review of attachment 8565392 [details] [diff] [review]:
-----------------------------------------------------------------

Looks like we should also add ssl.safaribooksonline.com (bug 1133940)

Comment 4

[Masatoshi Kimura [:emk]]

(In reply to David Keeler [:keeler] (use needinfo?) from comment #3)
> Looks like we should also add ssl.safaribooksonline.com (bug 1133940)

OK.
I also rerun the script and removed fixed sites.

https://hg.mozilla.org/integration/mozilla-inbound/rev/3ada01d5cdd1

Comment 5

[Masatoshi Kimura [:emk]]

Attachment: patch for checkin

Approval Request Comment
[Feature/regressing bug #]: N/A
[User impact if declined]: Users can not connect some broken secure sites.
[Describe test coverage new/current, TreeHerder]: Manually executed a list generator script which will virtually act as a test. No regression found on a try run:
https://treeherder.mozilla.org/#/jobs?repo=try&revision=476344889dbf
[Risks and why]: Very low. Only adding/removing entries from a static list.
[String/UUID change made/needed]: none

Comment 6

[Lawrence Mandel [:lmandel] (use needinfo)]

Comment on attachment 8566144 [details] [diff] [review]
patch for checkin

Glad to see sites being removed even if we need to add new ones. Aurora+

Comment 7

[Ryan VanderMeulen [:RyanVM]]

https://hg.mozilla.org/mozilla-central/rev/3ada01d5cdd1

Comment 8

[Ryan VanderMeulen [:RyanVM]]

https://hg.mozilla.org/releases/mozilla-aurora/rev/2e3aaa26bca4

Comment 9

[Anne (:annevk)]

That whitelist is not complete, e.g. 

  https://forums.whatwg.org/ 
  https://images.whatwg.org/
  https://validator.whatwg.org/
  https://spec.whatwg.org/

and there are probably more for whatwg.org, you'd have to ask Ian.

Comment 10

[Masatoshi Kimura [:emk]]

Could you consider to change the hosting company, seriously?

Comment 11

[Anne (:annevk)]

Ian doesn't want to go through the trouble. So yes, we did consider it... Also, DreamHost has stated they will resolve the issue this quarter for VPS users. (It's already been resolved for everyone else to my knowledge.)

Comment 12

[Masatoshi Kimura [:emk]]

Do you know why dom.spec.whatwg.org is already updated? Isn't it VPS?

Comment 13

[Anne (:annevk)]

Indeed, for historical reasons it's on my private account.

Comment 14

[Carsten Book [:Tomcat]]

https://hg.mozilla.org/integration/mozilla-inbound/rev/d713f17f6575

Comment 15

[Carsten Book [:Tomcat]]

https://hg.mozilla.org/integration/mozilla-inbound/rev/d713f17f6575

Comment 16

[Ryan VanderMeulen [:RyanVM]]

https://hg.mozilla.org/releases/mozilla-beta/rev/02b9c74353ad

Comment 17

[Wes Kocher (:KWierso) (Not reading bugmail; email directly if needed)]

https://hg.mozilla.org/mozilla-central/rev/d713f17f6575

Comment 18

[Ryan VanderMeulen [:RyanVM]]

In case anybody winds up here by virtue of those last couple commits, bug 1142769 landed with this bug number by accident.