1658266 - Consider enabling HTTPS-Only Mode in Prviate-Browsing Mode in Nightly by default

Status: NEW

(Core :: DOM: Security, task, P3)

Description

[Christoph Kerschbaumer [:ckerschb]]

I think we are getting to a point where HTTPS-Only Mode is providing solid value to end users so that with current UI it's easily usable and understandable for end users to overwrite a page in case it's not available over https.

Let's wait till we have landed:

• Bug 1642387, and
• Bug 1653026

Comment 1

[Christoph Kerschbaumer [:ckerschb]]

Attachment: Bug 1658266: Enable HTTPS-Only Mode in Prviate-Browsing Mode in Nightly by default

Comment 2

[Daniel Veditz [:dveditz]]

We have landed the bugs mentioned in comment 0. Is it time?

Comment 4

[Christoph Kerschbaumer [:ckerschb]]

Yeah, I think it is, or at least we are very close to enabling it by default in PBM in Nightly. Probably early in 2021 we are going to flip the switch.

Comment 5

[Christoph Kerschbaumer [:ckerschb]]

I guess the plan is that we first expose the pref in about:privatebrowsing so that private browsing users have at least some sense that https-only mode is enabled (see Bug 1686770) and then we can enable https-only by default in PBM in Nightly within this bug.