1712108 - Prevent leaving the local DB in empty state after signature verification failure

Status: NEW

(Firefox :: Remote Settings Client, defect, P1)

Description

[Mathieu Leplatre [:leplatrem]]

According to the synchronization process, when the signature verification fails after retry, the local DB is left empty if the collection does not have any packaged dump.

Any subsequent call to .get() will then trigger a synchronization. But if that synchronization fails again, then an empty list is returned.

This can lead to unexpected behaviour for consumers (eg. unlisting users from experiments).

We could make sure we don't erase the local data if the problem comes from the server.