1513645 - Remove Pref to Disable Symantec Distrust

Status: RESOLVED FIXED

(Core :: Security: PSM, enhancement, P1)

Description

[Wayne Thayer]

Once sufficient time has passed (65 or 66?) remove the ability to disable the Symantec distrust by changing the value of security.pki.distrust_ca_policy as was implemented in 1437754 and 1456112.

Comment 1

[J.C. Jones [:jcj] (he/they)]

66 is now, so let's do it in 66. :)

Comment 2

[Anton Bershanskiy]

Is the plan to remove the pref entirely or to leave the pref in with the only possible value of 2 and, should the need be, later introduce values 3 and above?
May I prepare a patch for review?

Comment 3

[Wayne Thayer]

I would say remove it altogether, but will defer to J.C.

Comment 4

[J.C. Jones [:jcj] (he/they)]

Yeah, remove wholesale.

Comment 5

[Anton Bershanskiy]

Attachment: symantec

Comment 6

[Anton Bershanskiy]

I created a draft patch (see attachment). This patch removes the pref and removes the code rendered dead by the pref removal.

Comment 7

[Dana Keeler (she/her) [:keeler]]

Anton, do you still want to work on this? If so, please see the documentation at https://developer.mozilla.org/en-US/docs/Mozilla/Developer_guide/How_to_Submit_a_Patch on how to submit a patch. Let me know if you have any questions.

Comment 8

[Benjamin Beurdouche [:beurdouche]]

Attachment: Bug 1513645 - Remove Pref to Disable Symantec Distrust. r=keeler

Comment 9

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/e877ac6e3caa
Remove Pref to Disable Symantec Distrust. r=keeler

Comment 10

[Alexandru Michis [:malexandru]]

https://hg.mozilla.org/mozilla-central/rev/e877ac6e3caa