1547013 - Enable automatically fixing MitM errors by default

Status: RESOLVED FIXED

(Firefox :: Security, task, P1)

Description

[Wayne Thayer]

The enterprise roots preference on Windows and MacOS imports roots that have been added to the OS root store by the user. We tested enabling this pref by default and found significant improvement in user engagement metrics. This bug is a request to enable the following changes by default:

1. In Release, whenever a MitM certificate error is detected, automatically enable the "enterprise roots" pref and retest. If the error is fixed, leave "enterprise roots" enabled.

2. in ESR, enable the "enterprise roots" pref by default.

Comment 1

[Wayne Thayer]

Release Note Request (optional, but appreciated)
[Why is this notable]: Changing how Firefox processes certificate errors
[Affects Firefox for Android]: No
[Suggested wording]: When an HTTPS error caused by antivirus software is detected, Firefox will attempt to automatically fix it.
[Links (documentation, blog post, etc)]: Blog post is being drafted at this time.

Comment 2

[Johann Hofmann [:johannh]]

Attachment: Bug 1547013 - Enable automatically fixing MitM errors by default. r=keeler

Comment 3

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/47e5e0e62494
Enable automatically fixing MitM errors by default. r=keeler

Comment 4

[Raul Gurzau (:RaulG)]

https://hg.mozilla.org/mozilla-central/rev/47e5e0e62494

Comment 5

[Julien Cristau [:jcristau]]

This is in the 68.0beta desktop release notes.