1542331 - DNS security should be detailed in site information panel

Status: NEW

(Firefox :: Site Identity, enhancement, P3)

Description

[Andy Grover [:grover]]

I think the status of the security of the DNS requests that went into fetching a page should be listed in the site information panel.

Our solution to protect the privacy of DNS requests, DNS over HTTPS (DoH), when enabled in Network Settings, has no visible way for the user to know if it's doing anything, other than about:networking->DNS TRR column.

Especially since we are looking at ways to conditionally enable DoH on a per-site basis to avoid some issues, having visibility into whether a given site caused an insecure DNS request on the network would be very valuable for users.

Comment 1

[Gary Chen [:xeonchen]]

1. Are we showing it's DNS encrypted once the top-level document is resolved by DoH? What if some sub-resources are not?
2. Cached resource are flagged as non-DoH, do we want to point this state out?

Comment 2

[Gary Chen [:xeonchen]]

Attachment: Bug 1542331 - Part 1: pass `isDoH`/`isFromCache` state via `onLocationChange`;

Comment 3

[Gary Chen [:xeonchen]]

Attachment: Bug 1542331 - add DNS-over-HTTPS pref state into Security UI;

Comment 4

[Nhi Nguyen (:nhi)]

Wayne, could you help find someone to work on the UX please?

Comment 5

[Gary Chen [:xeonchen]]

Attachment: Bug 1542331 - report non-TRR resolutions to console;

Comment 6

[Wayne Thayer]

(In reply to Nhi Nguyen (:nhi) from comment #4)

Wayne, could you help find someone to work on the UX please?

Bryan Bell is working on this.

Comment 8

[Gary Chen [:xeonchen]]

I’m not working on this...

Comment 9

[:Gijs (out for now; he/him)]

Boo, phab, you're not helpful.

Comment 10

[BugBot [:suhaib / :marco/ :calixte]]

Redirect a needinfo that is pending on an inactive user to the triage owner.
:pbz, since the bug has high priority and recent activity, could you have a look please?

For more information, please visit auto_nag documentation.

Comment 11

[BugBot [:suhaib / :marco/ :calixte]]

The bug assignee is inactive on Bugzilla, so the assignee is being reset.