1348696 - Running behind an authenticated proxy (without authenticating) is extremely painful

Status: UNCONFIRMED

(Core :: Networking: Proxy, defect, P5)

Description

[Bernard Gray]

User Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.98 Safari/537.36

Steps to reproduce:

1. Open the browser on a network with an authenticated proxy
2. Browse the Intranet (ie without authentication, don't go online)


Actual results:

In the first minute, I had to cancel at least 10 proxy authentication dialogs while firefox attempted to connect to a series of different update services.
Over the course of an extended browsing session, these popups continue to appear in batches of 5 or so at a time approximately every minute.

Screencast:
https://drive.google.com/open?id=0B3HLJgx8Sj1WQkEyNk5UWHRMcXc


Expected results:

No proxy popups should have appeared until a user (or intranet page) initiates a browsing session or connection outside the intranet).


We allow some users internet access by giving them a username and password for the proxy, and we deny it for some users, while still preserving intranet browsing access. The intranet-only browsing experience under firefox is basically unworkable due to constant popup dialogs.

Comment 2

[Bernard Gray]

Hi @YF, 
With respect, this is not a duplicate of #533467

The key difference being, #533467 authenticates on the first dialog but still receives popup authentication dialogs after doing so.

With my bug, I am not authenticating.

Comment 3

[YF (Yang)]

(In reply to Bernard Gray from comment #2)
> Hi @YF, 
> With respect, this is not a duplicate of #533467
> 
> The key difference being, #533467 authenticates on the first dialog but
> still receives popup authentication dialogs after doing so.
> 
> With my bug, I am not authenticating.

Sorry.


If setting the network.captive-portal-service.enabled pref to false, this issue still reproducible?

Comment 4

[Bernard Gray]

Thanks for the pointer, it's definitely improved - 

Firefox is still throwing up the prompt for tiles.services.mozilla.com on 
1. initial open, and
2. on every new tab page, 

but it has suppressed the prompts for self-repair and shavar services. 

At least for this scenario, I can just blank out the tiles urls in about:config without causing myself a security issue (I think).

Is it worth re-wording the bug to "tiles.services.mozilla.com" ignores the captive-portal-service=false directive?

Comment 5

[Firefox Bug Husbandry Bot]

Bulk change to priority: https://bugzilla.mozilla.org/show_bug.cgi?id=1399258

Comment 6

[BMO Automation]

Moving bug to Core/Networking: Proxy.