1862062 - move some PSM telemetry to opt-out rather than opt-in on release

Status: RESOLVED FIXED

(Core :: Security: PSM, enhancement, P1)

Description

[Dana Keeler (she/her) (use needinfo) [:keeler]]

Some PSM TLS telemetry is currently opt-in on release, rather than opt-out. We need to collect information like what cipher suite was negotiated, whether or not OCSP succeeded, etc., from release users so we have an accurate idea of how changes we make in PSM affect them.

Comment 1

[Dana Keeler (she/her) (use needinfo) [:keeler]]

Attachment: Bug 1862062 - remove defunct TLS_ERROR_REPORT_UI telemetry probe r?jschanck

Comment 2

[Dana Keeler (she/her) (use needinfo) [:keeler]]

Attachment: Bug 1862062 - remove expired SSL_CT_POLICY_COMPLIANCE_OF_EV_CERTS telemetry probe r?jschanck

Depends on D192398

Comment 3

[Dana Keeler (she/her) (use needinfo) [:keeler]]

Attachment: Bug 1862062 - remove unnecessary and outdated metadata from PSM telemetry probes r?jschanck

Depends on D192399

Comment 4

[Dana Keeler (she/her) (use needinfo) [:keeler]]

Attachment: Bug 1862062 - change some PSM TLS telemetry to opt-out rather than opt-in on release r?jschanck

Depends on D192400

Comment 5

[Dana Keeler (she/her) (use needinfo) [:keeler]]

Attachment: Bug 1862062 - rework PSM TLS cipher suite telemetry r?jschanck

Depends on D192401

Comment 6

[Dana Keeler (she/her) (use needinfo) [:keeler]]

Attachment: request.md

Comment 7

[Chris H-C :chutten]

Comment on attachment 9361318 [details]
request.md

DATA COLLECTION REVIEW RESPONSE:

Is there or will there be documentation that describes the schema for the ultimate data set available publicly, complete and accurate?

Yes.

Is there a control mechanism that allows the user to turn the data collection on and off?

Yes. This collection can be controlled through Firefox's Preferences.

If the request is for permanent data collection, is there someone who will monitor the data over time?

Yes, Dana Keeler is responsible.

Using the category system of data types on the Mozilla wiki, what collection type of data do the requested measurements fall under?

Category 1, Technical.

Is the data collection request for default-on or default-off?

Default on for all channels.

Does the instrumentation include the addition of any new identifiers?

No.

Is the data collection covered by the existing Firefox privacy notice?

Yes.

Does the data collection use a third-party collection tool?

No.

---

Result: datareview+

Comment 8

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/2a321dff5c82
remove defunct TLS_ERROR_REPORT_UI telemetry probe r=jschanck
https://hg.mozilla.org/integration/autoland/rev/8c73f748ca55
remove expired SSL_CT_POLICY_COMPLIANCE_OF_EV_CERTS telemetry probe r=jschanck
https://hg.mozilla.org/integration/autoland/rev/13e730e6e684
remove unnecessary and outdated metadata from PSM telemetry probes r=jschanck
https://hg.mozilla.org/integration/autoland/rev/8d2222109dd9
change some PSM TLS telemetry to opt-out rather than opt-in on release r=jschanck
https://hg.mozilla.org/integration/autoland/rev/dcc224a798ba
rework PSM TLS cipher suite telemetry r=jschanck

Comment 9

[Cosmin Sabou [:CosminS]]

Backed out for causing xpcshell failures on test_content_signing.js

Push with failures: https://treeherder.mozilla.org/jobs?repo=autoland&resultStatus=testfailed%2Cbusted%2Cexception&revision=dcc224a798baee5309bef667dd3455a11627217a&selectedTaskRun=QIFz-oNvTqmRiEESsZik6w.0

Failure log: https://treeherder.mozilla.org/logviewer?job_id=434750861&repo=autoland

Backout link: https://hg.mozilla.org/integration/autoland/rev/adb8eb15cf4597f444b71aba2e900f485acb045e

Comment 10

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/b896abfd8a76
remove defunct TLS_ERROR_REPORT_UI telemetry probe r=jschanck
https://hg.mozilla.org/integration/autoland/rev/aeae09568838
remove expired SSL_CT_POLICY_COMPLIANCE_OF_EV_CERTS telemetry probe r=jschanck
https://hg.mozilla.org/integration/autoland/rev/523db8ae5239
remove unnecessary and outdated metadata from PSM telemetry probes r=jschanck
https://hg.mozilla.org/integration/autoland/rev/6f91ffe261ff
change some PSM TLS telemetry to opt-out rather than opt-in on release r=jschanck
https://hg.mozilla.org/integration/autoland/rev/437d0b3ec798
rework PSM TLS cipher suite telemetry r=jschanck

Comment 11

[Cosmin Sabou [:CosminS]]

https://hg.mozilla.org/mozilla-central/rev/b896abfd8a76
https://hg.mozilla.org/mozilla-central/rev/aeae09568838
https://hg.mozilla.org/mozilla-central/rev/523db8ae5239
https://hg.mozilla.org/mozilla-central/rev/6f91ffe261ff
https://hg.mozilla.org/mozilla-central/rev/437d0b3ec798