Open Bug 1950140 Opened 23 days ago Updated 23 days ago

Implement a cache for checking whether the Abridged Certificates dictionary has been loaded.

Categories

(Core :: Security: PSM, enhancement, P1)

enhancement

Tracking

()

People

(Reporter: djackson, Assigned: djackson)

References

(Blocks 1 open bug)

Details

The certificates used by Abridged Certificates are loaded via RemoteSettings. We need to efficiently check whether these certificates are available when advertising support for a particular dictionary.

We can alter the check for present certificates to use a cache with a key provided by the caller. This cache will immediately return whether the certificates are available. Negative answers in the cache (there are missing certificates) will be expired whenever new certificates are added. Positive answers in the cache (the certificates are present) will be expired whenever existing certificates are removed.

You need to log in before you can comment on or make changes to this bug.