Closed
Bug 2045980
Opened 3 months ago
Closed 2 months ago
Expand SitePolicies to cover forced HTTPS connections
Categories
(Enterprise Products :: Firefox, enhancement, P2)
Enterprise Products
Firefox
Tracking
(Not tracked)
VERIFIED
FIXED
MVP
People
(Reporter: bsmth, Assigned: mossop)
References
(Blocks 1 open bug)
Details
(Whiteboard: [size=1.5])
User Story
As an admin, I want the `SitePolicies` policy to support a `ForceHttpsOnly` field, so that I can require matched sites to use HTTPS with no HTTP fallback. Acceptance criteria: - `ForceHttpsOnly` is a boolean field on a `SitePolicies` entry. When enabled, HTTP requests upgraded for the matched site to HTTPS. - If the HTTPS connection fails or is unavailable, there's no fallback to HTTP. Implementation notes: - Reference: `SitePolicies` enterprise policy. - Related prefs: dom.security.https_only_mode, dom.security.https_only_mode_pbm Out of scope: - New site-matching syntax; constraints reuse the existing SitePolicies site-matching mechanism.
Attachments
(1 file)
No description provided.
|
||
Updated•3 months ago
|
Severity: -- → S2
Whiteboard: [size=1.5]
|
Assignee | |
Updated•2 months ago
|
Assignee: nobody → dtownsend
|
|
Assignee | |
Comment 1•2 months ago
|
||
|
||
Updated•2 months ago
|
Attachment #9621560 -
Attachment description: WIP: Bug 2045980: Add a site policy for https-only mode. → Bug 2045980: Add a site policy for https-only mode. r=mkaply!,#necko-reviewers!
Pushed by dtownsend@mozilla.com:
https://github.com/mozilla-firefox/firefox/commit/da25fd8337c6
https://hg.mozilla.org/integration/autoland/rev/87eb7dd59026
Add a site policy for https-only mode. r=mkaply,necko-reviewers
|
Reporter | |
Updated•2 months ago
|
Flags: qe-verify+
|
||
Comment 4•14 days ago
|
||
Navigating to this website while HttpsOnly is set throws "Firefox Enterprise can’t create a secure connection to the server at httpforever.com." error.
Verified fixed using Firefox Enterprise 156.0 and 158.0a1 on Windows 11, MacOS 26.5 and Ubuntu 24.04.
You need to log in
before you can comment on or make changes to this bug.
Description
•