Open Bug 1698247 Opened 4 years ago Updated 1 year ago

Remove Opportunistic Security (aka Opportunistic Encryption aka OE)

Categories

(Core :: Networking: HTTP, task, P3)

Product:
Core
Component:
Networking: HTTP
Type:
task

Tracking

()

People

(Reporter: annevk, Unassigned)

References

Details

(Whiteboard: [necko-triaged])

With most connections now being HTTPS I don't think it's worth it for us to maintain this code. Additionally:

  1. This is not used a lot.
  2. No other browser implements it.

(Judging from bug 1502555 it also seems that we didn't support it properly for two years without anyone noticing.)

Severity: -- → N/A
Type: defect → task
Priority: -- → P3
Whiteboard: [necko-triaged]

The implementation has been completely disabled for a few years now.

Depends on: CVE-2021-38507
You need to log in before you can comment on or make changes to this bug.