1856928 - Enable ECH in Firefox by default

Status: RESOLVED FIXED

(Core :: Security: PSM, enhancement, P1)

Description

[Dennis Jackson]

ECH has been rolling out to Firefox users over recent weeks via Nimbus. We can now enable it by default.

Comment 1

[Dennis Jackson]

Attachment: Bug 1856928 - Enable ECH and ECH GREASE by default r=kershaw,keeler

Comment 2

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/ba9c3d10164b
Enable ECH and ECH GREASE by default r=kershaw

Comment 3

[Norisz Fay [:noriszfay]]

https://hg.mozilla.org/mozilla-central/rev/ba9c3d10164b

Comment 4

[Dianna Smith [:diannaS]]

:Dennis do you want to mention this in the Fx120 release notes?

Comment 5

[Dennis Jackson]

I was going to let this sit for a day just to be doubly sure I didn't typo anything and then ask for a beta uplift + 119 rel notes. Is that reasonable?

Comment 6

[Dianna Smith [:diannaS]]

Sounds good, ty!

Comment 7

[Dennis Jackson]

Comment on attachment 9356596 [details]
Bug 1856928 - Enable ECH and ECH GREASE by default r=kershaw,keeler

Beta/Release Uplift Approval Request

• User impact if declined: This patch enables ECH by default in line with our announcement. ECH is already rolled out to the Firefox Release population via Nimbus.
• Is this code covered by automated tests?: Yes
• Has the fix been verified in Nightly?: Yes
• Needs manual test from QE?: No
• If yes, steps to reproduce:
• List of other uplifts needed: None
• Risk to taking this patch: Low
• Why is the change risky/not risky? (and alternatives if risky):
• String changes made/needed:
• Is Android affected?: Yes

Comment 8

[Dennis Jackson]

Release Note Request (optional, but appreciated)
[Why is this notable]: Enables a recently announced privacy feature (ECH) by default.
[Affects Firefox for Android]: Yes
[Suggested wording]: Encrypted Client Hello (ECH) is now available to Firefox users, delivering a more private browsing experience. ECH extends the encryption used in TLS connections to cover more of the handshake and better protect sensitive fields. Read more about the launch of ECH on Mozilla Distilled."
[Links (documentation, blog post, etc)]: https://blog.mozilla.org/en/products/firefox/encrypted-hello/

Comment 9

[Donal Meehan [:dmeehan]]

Comment on attachment 9356596 [details]
Bug 1856928 - Enable ECH and ECH GREASE by default r=kershaw,keeler

Approved for 119.0b7

Comment 10

[Pulsebot]

https://hg.mozilla.org/releases/mozilla-beta/rev/70311465407e

Comment 11

[Donal Meehan [:dmeehan]]

Added to 119 beta release notes (https://www.mozilla.org/en-US/firefox/119.0beta/releasenotes/) as well as the draft release notes doc for Fx119