1624464 - 52ms of GeckoView startup are spent in nsNSSComponent::InitializeNSS (on Moto G5)

Status: RESOLVED FIXED

(Core :: Security: PSM, defect, P1)

Description

[Markus Stange [:mstange]]

Profile: https://perfht.ml/2UAEKTI

nsNSSComponent::InitializeNSS takes 52ms during startup on a Moto G5. This is on the critical path in the "app link" startup scenario and delays the initial network request.

Unfortunately, due to bug 1623942, the profile above doesn't have useful call stacks. To help with that, here's a profile from Firefox startup on macOS: https://perfht.ml/2y4E2GT

On Android, 33ms of those 52ms are spent in freebl functions, so this time is likely spent in PK11_ImportPublicKey which runs during CTLogVerifier::Init.

Comment 1

[J.C. Jones [:jcj] (he/they)]

The initialization process for NSS belongs to PSM -- it's possible we need to speed up something in the NSS-side too, but analysis here would be to start with nsNSSComponent method and see if there's yet more that can be deferred to async operations.

Comment 2

[Dana Keeler (she/her) [:keeler]]

CT is disabled by default, so it doesn't make much sense to be loading those keys.

Comment 3

[Dana Keeler (she/her) [:keeler]]

Attachment: Bug 1624464 - don't load certificate transparency log keys if CT is disabled r?kjacobs

Comment 4

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/d6f7cff85143
don't load certificate transparency log keys if CT is disabled r=kjacobs

Comment 5

[Cristina Coroiu [:ccoroiu]]

https://hg.mozilla.org/mozilla-central/rev/d6f7cff85143