1195802 - Telemetry data access needs to support HTTPS and turn off HTTP

Status: RESOLVED FIXED

(Cloud Services Graveyard :: Metrics: Pipeline, defect)

Description

[Richard Barnes [:rbarnes]]

Mozilla should not be offering services over non-secure HTTP.  The Unified telemetry access system is broken over HTTPS.  For example, the histograms dashboard fails:

https://telemetry.mozilla.org/new-pipeline/dist.html

It appears that the crux of the problem is the lack of HTTPS support on aggregates.telemetry.mozilla.org.  But once that is fixed, we should turn on http->https redirects and HSTS on telemetry.mozilla.org, as we have on pretty much all other Mozilla properties.

Comment 1

[Vladan Djeric (:vladan)]

Please comment on https://github.com/mozilla/telemetry-dashboard/pull/125 when this is fixed

Comment 2

[Roberto Agostino Vitillo (:rvitillo)]

As mentioned on IRC I don't have the rights to view the available certificates on the moz-svc-dev IAM.

Comment 3

[Wesley Dawson [:whd]]

We currently have a certificate that only supports the following names:

DNS Name: telemetry.mozilla.org
DNS Name: incoming.telemetry.mozilla.org
DNS Name: telemetry-dash.mozilla.org
DNS Name: fxos.telemetry.mozilla.org
DNS Name: analysis.telemetry.mozilla.org

So this requires a new cert to be generated.

Comment 4

[Roberto Agostino Vitillo (:rvitillo)]

(In reply to Richard Barnes [:rbarnes] from comment #0)
> It appears that the crux of the problem is the lack of HTTPS support on
> aggregates.telemetry.mozilla.org.  But once that is fixed, we should turn on
> http->https redirects and HSTS on telemetry.mozilla.org, as we have on
> pretty much all other Mozilla properties.

aggregates.telemetry.mozilla.org supports now https. The telemetry.mozilla.org site is hosted on S3 and delivered by CloudFront. Benson, could you please redirect http to https?

Comment 5

[Benson Wong [:mostlygeek]]

http://telemetry.mozilla.org now redirects to https://telemetry.mozilla.org.