1924585 - collect telemetry on hyphens beginning/ending domain labels causing a compatibility issue

Status: RESOLVED FIXED

(Core :: Security: PSM, task)

Description

[Dana Keeler (she/her) (use needinfo) [:keeler]]

Bug 1184059 notes a compatibility issue whereby mozilla::pkix rejects certificates with wildcard subject alternative name entries when a domain label in the hostname begins or ends with a hyphen (i.e., if a user navigates to label-.example.com or -label.example.com, which has a certificate valid for *.example.com, mozilla::pkix will reject it). We should gather telemetry to see how often this is an issue in the wild.

Comment 1

[BugBot [:suhaib / :marco/ :calixte]]

The Bugbug bot thinks this bug should belong to the 'Core::Security: PSM' component, and is moving the bug to that component. Please correct in case you think the bot is wrong.

Comment 2

[Dana Keeler (she/her) (use needinfo) [:keeler]]

Attachment: Bug 1924585 - add telemetry to measure hyphens in domain names causing compatibility issues r?Gijs

Comment 3

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/3f4fb9bf51b2
add telemetry to measure hyphens in domain names causing compatibility issues r=Gijs,necko-reviewers,valentin

Comment 4

[Sandor Molnar[:smolnar]]

Backed out for causing android perma failures

Backout link: https://hg.mozilla.org/integration/autoland/rev/9db61751f661e52aac2b8206e3013884065607ef

Push with failures

Failure log ->

Comment 5

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/b60c966750df
add telemetry to measure hyphens in domain names causing compatibility issues r=Gijs,necko-reviewers,valentin

Comment 6

[Cosmin Sabou [:CosminS]]

https://hg.mozilla.org/mozilla-central/rev/b60c966750df