Closed Bug 1574959 Opened 6 years ago Closed 3 years ago

The MITM detection of the update checker is invalid

Categories

(Core :: Security: PSM, defect, P2)

Product:
Core
Component:
Security: PSM
Type:
defect

Tracking

()

Status:
RESOLVED DUPLICATE of bug 1727820

People

(Reporter: timhuang, Unassigned)

References

Details

(Whiteboard: [psm-backlog])

See [1], the request here is always undefined, so we won't be able to check the cert chain here. I believe we are missing something here, like

let request = event.target;

[1] https://searchfox.org/mozilla-central/rev/5912f376ab6a17afcba2b7654586013158ed64b5/toolkit/mozapps/update/UpdateService.jsm#4053-4055

Blocks: 1480704
Priority: -- → P2
Whiteboard: [psm-backlog]
Severity: normal → S3

Bug 1727820 fixed this, it seems.

Status: NEW → RESOLVED
Closed: 3 years ago
Duplicate of bug: 1727820
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.