1678056 - Enable www redirect by default

Status: RESOLVED FIXED

(Firefox :: Security, task, P1)

Description

[Romain Testard [:RT]]

Omnibus proved that the Shirley features improve user engagement while not regressing activation or retention:
https://docs.google.com/document/d/16JEiQ_8XSk3nBs9qcwMZC-76m4nttb1YRKwc6Xhf1xE/edit#heading=h.dywl2xu8cafc

We want to enable the Shirley features to all users. This bug in particular tracks enablement of the www redirect feature.
Details:
Servers with SSL certificates not configured for non-www domains return SSL_ERROR_BAD_CERT_DOMAIN when users reach https://domain.com instead of https://www.domain.com. This pref allow redirecting users automatically so they don't encounter cert errors.

Acceptance criteria:

• Set security.bad_cert_domain_error.url_fix_enabled to true

Comment 1

[Romain Testard [:RT]]

The intention is to ship this with 84, an uplift will therefore be required.

Comment 2

[BugBot [:suhaib / :marco/ :calixte]]

Bugbug thinks this bug should belong to this component, but please revert this change in case of error.

Comment 3

[Johann Hofmann [:johannh]]

Attachment: Bug 1678056 - Enable www redirect fix for bad cert domain errors by default. r=prathiksha

Comment 4

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/0c3277e8b539
Enable www redirect fix for bad cert domain errors by default. r=prathiksha

Comment 5

[Atila Butkovits]

https://hg.mozilla.org/mozilla-central/rev/0c3277e8b539

Comment 6

[Ryan VanderMeulen [:RyanVM]]

Does this need a Beta approval request?

Comment 7

[Johann Hofmann [:johannh]]

Yes, I think that we want to uplift this to 84, sorry for missing that. I'll do the request...

Comment 8

[Johann Hofmann [:johannh]]

Comment on attachment 9188846 [details]
Bug 1678056 - Enable www redirect fix for bad cert domain errors by default. r=prathiksha

Beta/Release Uplift Approval Request

• User impact if declined: Not getting a cool feature that has a significant impact on certificate error rates.
• Is this code covered by automated tests?: Yes
• Has the fix been verified in Nightly?: No
• Needs manual test from QE?: No
• If yes, steps to reproduce:
• List of other uplifts needed: None
• Risk to taking this patch: Low
• Why is the change risky/not risky? (and alternatives if risky): This is not adding new code, just enabling a feature that has baked in Nightly and Beta for a while and has already been on Release as part of the Shirley thing, where it was proven to have a positive effect on error rates.
• String changes made/needed: None

Comment 9

[Ryan VanderMeulen [:RyanVM]]

Comment on attachment 9188846 [details]
Bug 1678056 - Enable www redirect fix for bad cert domain errors by default. r=prathiksha

Approved for 84.0b7.

Comment 10

[Ryan VanderMeulen [:RyanVM]]

https://hg.mozilla.org/releases/mozilla-beta/rev/936379bcee6e