1570732 - DIsable DoH if parental controls detected

Status: RESOLVED FIXED

(Core :: Networking: DNS, enhancement, P1)

Description

[Andy Grover [:grover]]

See https://blog.mozilla.org/netpolicy/2014/07/22/prefersafe-making-online-safety-simpler-in-firefox/ , Firefox detects if platform-based parental controls are enabled and if so adds a header. We should also use the presence of parental controls as a signal to disable TRR, since TRR may bypass DNS-based parental controls.

Comment 1

[Wayne Thayer]

Should DoH be disabled even if the user has explicitly enabled it? Or is the intent here to signal that Firefox shouldn't attempt to enable DoH if parental controls are detected?

Comment 2

[Nhi Nguyen (:nhi)]

Arthur, could you answer Wayne's question above? Thanks!

Comment 3

[Kershaw Chang [:kershaw]]

Anyone has the answer for comment 1?
I need to know what we want to do before I start working on this.

Comment 4

[Andy Grover [:grover]]

Following the lead documented in the blog post mentioned, we should NOT have a pref for this feature, to prevent kids from disabling DoH disablement. So yes, if the OS platform parental controls are enabled, then DoH should be unconditionally disabled with no way to enable it, other than turning off OS parental controls.

Comment 5

[Kershaw Chang [:kershaw]]

Attachment: Bug 1570732 - Skip trr when parental control is enabled

Comment 6

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/f421b7797352
Skip trr when parental control is enabled r=dragana

Comment 7

[Dorel Luca [:dluca]]

https://hg.mozilla.org/mozilla-central/rev/f421b7797352