1876435 - gather telemetry on certificate issuer sources (TLS handshake, preloading, etc.)

Status: RESOLVED FIXED

(Core :: Security: PSM, task, P1)

Description

[Dana Keeler (she/her) (use needinfo) [:keeler] (on leave)]

When building a certificate chain to verify a TLS server certificate, Firefox can consult a number of locations to find issuer certificates: the TLS handshake itself, intermediate preloading, enterprise certificates, the NSS cert DB, and the built-in roots module. It would be helpful (e.g. for bug 1842872) to have telemetry indicating the relative usage of each source.

Comment 1

[Dana Keeler (she/her) (use needinfo) [:keeler] (on leave)]

Attachment: Bug 1876435 - gather telemetry on the sources of issuer certificates r?jschanck

Comment 2

[Dana Keeler (she/her) (use needinfo) [:keeler] (on leave)]

Attachment: request.md

Comment 3

[Chris H-C :chutten]

Comment on attachment 9376518 [details]
request.md

PRELIMINARY NOTES:

Since the data collection is Glean, did you know that ./mach data-review can help build your data review request for you? I think it's pretty neat.

DATA COLLECTION REVIEW RESPONSE:

Is there or will there be documentation that describes the schema for the ultimate data set available publicly, complete and accurate?

Yes.

Is there a control mechanism that allows the user to turn the data collection on and off?

Yes. This collection can be controlled through the product's preferences.

If the request is for permanent data collection, is there someone who will monitor the data over time?

Yes, Dana Keeler is responsible.

Using the category system of data types on the Mozilla wiki, what collection type of data do the requested measurements fall under?

Category 2, Interaction.

Is the data collection request for default-on or default-off?

Default on for all channels.

Does the instrumentation include the addition of any new identifiers?

No.

Is the data collection covered by the existing Firefox privacy notice?

Yes.

Does the data collection use a third-party collection tool?

No.

---

Result: datareview+

Comment 4

[Dana Keeler (she/her) (use needinfo) [:keeler] (on leave)]

Attachment: request-1876435.md

(carrying over data-review+ after changing format of collected data)

Comment 5

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/54d734790d28
gather telemetry on the sources of issuer certificates r=jschanck

Comment 6

[Serban Stanca [:SerbanS]]

https://hg.mozilla.org/mozilla-central/rev/54d734790d28