Closed Bug 1667930 Opened 4 months ago Closed 3 months ago

Increase downloads per day for intermediate preloading

Categories

(Core :: Security: PSM, task)

task

Tracking

()

RESOLVED FIXED
84 Branch
Tracking Status
relnote-firefox --- 84+
firefox84 --- fixed

People

(Reporter: jandem, Assigned: jcj)

References

(Blocks 1 open bug)

Details

Attachments

(1 file)

From :jcj in bug 1667536 comment 3:

Maybe this is an indication we should speed up the pref for how fast we pre-load into profiles. You could open a bug blocking bug 1535662 to increase the downloads/day.

Assignee: nobody → jjones
Status: NEW → ASSIGNED

Since we continue to encounter reported bugs that intermediate preloading solves
when it is finished, let's increase the speed. Right now preloading takes a
profile about 14 syncs. This changes that to be 1 sync, for the foreseeable
future. (There are 2454 records today [0])

[0] https://firefox.settings.services.mozilla.com/v1/buckets/security-state/collections/intermediates/records

Pushed by jjones@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/6810172b5a58
Increase Intermediate Preload rate r=leplatrem,keeler
Status: ASSIGNED → RESOLVED
Closed: 3 months ago
Resolution: --- → FIXED
Target Milestone: --- → 84 Branch

Release Note Request (optional, but appreciated)
[Why is this notable]: New profiles should learn all Intermediate CA Certificates almost immediately
[Affects Firefox for Android]: No
[Suggested wording]: New profiles will load all of Mozilla's trusted intermediate certificate authorities from Remote Settings in a single day now, rather than spread out over multiple weeks. This makes it much more likely that a new Firefox user will not encounter security errors on misconfigured websites.
[Links (documentation, blog post, etc)]: https://wiki.mozilla.org/Security/CryptoEngineering/Intermediate_Preloading

relnote-firefox: --- → ?

I'm not sure about this going into the final release notes for 84 (not sure this is user-facing enough to be worth calling out to that audience), but I definitely think it makes sense for the Beta notes.

Duplicate of this bug: 1678053
You need to log in before you can comment on or make changes to this bug.