Closed
Bug 2045980
Opened 2 months ago
Closed 29 days ago
Expand SitePolicies to cover forced HTTPS connections
Categories
(Enterprise Products :: Firefox, enhancement, P2)
Enterprise Products
Firefox
Tracking
(firefox155 fixed)
RESOLVED
FIXED
MVP
| Tracking | Status | |
|---|---|---|
| firefox155 | --- | fixed |
People
(Reporter: bsmth, Assigned: mossop)
References
(Blocks 1 open bug)
Details
(Whiteboard: [size=1.5])
User Story
As an admin, I want the `SitePolicies` policy to support a `ForceHttpsOnly` field, so that I can require matched sites to use HTTPS with no HTTP fallback. Acceptance criteria: - `ForceHttpsOnly` is a boolean field on a `SitePolicies` entry. When enabled, HTTP requests upgraded for the matched site to HTTPS. - If the HTTPS connection fails or is unavailable, there's no fallback to HTTP. Implementation notes: - Reference: `SitePolicies` enterprise policy. - Related prefs: dom.security.https_only_mode, dom.security.https_only_mode_pbm Out of scope: - New site-matching syntax; constraints reuse the existing SitePolicies site-matching mechanism.
Attachments
(1 file)
No description provided.
|
||
Updated•2 months ago
|
Severity: -- → S2
Whiteboard: [size=1.5]
|
Assignee | |
Updated•1 month ago
|
Assignee: nobody → dtownsend
|
|
Assignee | |
Comment 1•1 month ago
|
||
|
||
Updated•1 month ago
|
Attachment #9621560 -
Attachment description: WIP: Bug 2045980: Add a site policy for https-only mode. → Bug 2045980: Add a site policy for https-only mode. r=mkaply!,#necko-reviewers!
Pushed by dtownsend@mozilla.com:
https://github.com/mozilla-firefox/firefox/commit/da25fd8337c6
https://hg.mozilla.org/integration/autoland/rev/87eb7dd59026
Add a site policy for https-only mode. r=mkaply,necko-reviewers
|
Reporter | |
Updated•28 days ago
|
Flags: qe-verify+
You need to log in
before you can comment on or make changes to this bug.
Description
•