1526962 - [ja] Verify existing mailto protocol handler and switch to https

Status: RESOLVED FIXED

(Mozilla Localizations :: ja / Japanese, enhancement)

Description

[Francesco Lodolo [:flod]]

Firefox and Firefox for Android have the following mailto protocol handler, still using http. We should verify if it's still relevant, and update it to https where possible.

http://compose.mail.yahoo.co.jp/ym/Compose?To=%s

The https doesn't seem to be loading for me. Does it make sense to keep it?

Comment 1

[Masahiko Imanaka [:marsf]]

The current URL works and redirect to compose page. The redirected URL is "https://".
However, http"s"://compose.mail.yahoo.co.jp/ doesn't load nor redirect to compose page.

We should keep it.

Comment 2

[:Gijs (he/him)]

(In reply to Masahiko Imanaka [:marsf] from comment #1)

The current URL works and redirect to compose page. The redirected URL is "https://".
However, http"s"://compose.mail.yahoo.co.jp/ doesn't load nor redirect to compose page.

We should keep it.

The problem is that because it's not https, we transmit the recipient email address and potentially other fields (subject/message) as plaintext, ie without encryption. This means we leak private data e.g. to the user's ISP or other passive MITM attackers. This is a privacy/security risk.

Isn't there an https: equivalent for this URL?

Comment 3

[Masahiko Imanaka [:marsf]]

I tried some https URLs with "To" parameter.
This URL works with no redirect and keeps https:
https://jp.mg5.mail.yahoo.co.jp/ym/Compose?To=%s

"jp.mg5.mail.yahoo.co.jp/" is the current domain of Yahoo! Japan mail.
From "mg1" to "mg4" are all redirected to "mg5" (mg1 and mg3 were beta version of the webmail).
I'm not sure "jp.mg5" part will be changed in the future.

Comment 4

[Francesco Lodolo [:flod]]

Thanks. Unfortunately that doesn't look like a stable URL to use. Let's see if we can get some answers through our BD department.

Comment 5

[:Gijs (he/him)]

(In reply to Francesco Lodolo [:flod] from comment #4)

Thanks. Unfortunately that doesn't look like a stable URL to use. Let's see if we can get some answers through our BD department.

Any answers forthcoming? :-)

Comment 6

[Christopher Arnold]

Thank you for the heads up on this. I'm seeking a contact who can help us.

Comment 7

[Mike Kaply [:mkaply]]

We've been told by Yahoo Japan that this should work:

https://mail.yahoo.co.jp/compose/?To=mailto%3Afoo%40isp.com%3FCc%3Dbar%40isp.com%26Subject%3DHello

Comment 8

[Francesco Lodolo [:flod]]

Can you confirm if this works?

Comment 9

[Masahiko Imanaka [:marsf]]

(In reply to Francesco Lodolo [:flod] from comment #8)

Can you confirm if this works?

Yes, I confirmed it works fine.
Its connection to "jp.mg5.mail.yahoo.co.jp" are all encrypted.

Comment 10

[Francesco Lodolo [:flod]]

Thanks, landed in
https://hg.mozilla.org/l10n-central/ja/rev/955d3a2ae43a5f87ab79cda281e82f407993b2ac
https://hg.mozilla.org/l10n-central/ja-JP-mac/rev/243a244153a3414c26eff48d2bed35d1954d6946

Comment 11

[Francesco Lodolo [:flod]]

Follow-up to update the handlerversion…
https://hg.mozilla.org/l10n-central/ja-JP-mac/rev/9035a42d2f3e339899fa67e5149a5d987f5cd989
https://hg.mozilla.org/l10n-central/ja/rev/eff78164da28d50958864060e9ab27e1c7a586d8