1860589 - Implement Telemetry for mail.smime.accept_insecure_sha1_message_signatures

Status: NEW

(MailNews Core :: Security: S/MIME, enhancement)

Description

[Kai Engert [:KaiE:]]

As a follow-up to bug 1854592, Alex suggests the we implement telemetry to track how many users need the newly added pref mail.smime.accept_insecure_sha1_message_signatures

Magnus suggested, instead of simply tracking how many users enable the pref (which could be easily done), we should rather track how many users actually run into the combination of:

• pref is enabled
• S/MIME signed with SHA-1 is processed
• signature is treated as valid, because of the pref

I'd prefer if this tracking is done outside of the core signature verification code.

Maybe it could be done at the JS UI level - but for that, we'll have to make the discovered hash algorithm visible for the UI - something that users have requested to be discoverable in the UI anyway.