Open Bug 1333509 Opened 9 years ago Updated 3 years ago

Add telemetry for secure transport (HTTP->HTTPS) upgrades

Categories

(Core :: DOM: Security, defect, P3)

Product:
Core
Component:
DOM: Security
Type:
defect

Tracking

()

People

(Reporter: kmckinley, Unassigned)

Details

(Whiteboard: [domsecurity-backlog1])

Right now, telemetry for upgrading HTTP->HTTPS is gathered in multiple places, or potentially not gathered at all. For example, https://dxr.mozilla.org/mozilla-central/source/netwerk/base/nsNetUtil.cpp#2206, an 's' character is added to the scheme with no telemetry. First, find all places where HTTP is upgraded to HTTPS. This could be HSTS or Upgrade-Insecure-Requests, for example. What to measure: % of requests upgraded % of requests upgraded by UIR/HSTS/other
(In reply to Kate McKinley [:kmckinley] from comment #0) > Right now, telemetry for upgrading HTTP->HTTPS is gathered in multiple > places, or potentially not gathered at all. For example, > https://dxr.mozilla.org/mozilla-central/source/netwerk/base/nsNetUtil. > cpp#2206, an 's' character is added to the scheme with no telemetry. FWIW, Telemetry for this case is added right underneath: https://dxr.mozilla.org/mozilla-central/source/netwerk/base/nsNetUtil.cpp#2221
Priority: -- → P3
Whiteboard: [domsecurity-backlog1]
Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.