1618615 - Retain button to re-enable TLS 1.0/1.1 via the error page in ESR 78

Status: RESOLVED WONTFIX

(Firefox :: Security, task, P2)

Description

[J.C. Jones [:jcj] (he/they)]

The TLS 1.0/1.1 deprecation will be override-able via preference and policy for the duration of ESR 78. Given the general audience for ESR releases, I recommend we re-enable the "fix it" button on the ESR 78 branch. We could consider landing the removal of that button maybe halfway through the ESR 78 cycle.

This likely wouldn't have measurable impacts on old TLS usage on the Internet, but would hopefully keep users who aren't comfortable changing prefs from staying on older versions of the browser while the long-tail of enterprise and old equipment catches up.

(Of course, ESR 2021 will come for them, too.)

Since current plans involve removing the button from m-c earlier than 78, to perform this change we would need to delay unlanding the code until after ESR 78 branches, then flip the pref on the ESR-78 branch.

Comment 1

[Johann Hofmann [:johannh]]

Hmph, no way to track ESR 78 at the moment, I suppose you're making sure we don't forget about this?

Since current plans involve removing the button from m-c earlier than 78, to perform this change we would need to delay unlanding the code until after ESR 78 branches, then flip the pref on the ESR-78 branch.

I don't think removing the code is urgent. We can just flip the pref :)

Comment 2

[Masatoshi Kimura [:emk]]

ESR 78 is dead.