812598 - Entire SSL session cache is cleared when closing last private browsing window

Status: NEW

(Core :: Security: PSM, defect, P5)

Description

[Brian Smith (:briansmith, :bsmith, use NEEDINFO?)]

+++ This bug was initially created as a clone of Bug #769288 +++

After bug 769288, the entire SSL session cache will be cleared when we exit a private browsing window. Instead, we should only remove the entries for private browsing sessions.

Comment 1

[(no longer active)]

Brian, can you please explain what needs to be done here?  Thanks!

Comment 2

[Brian Smith (:briansmith, :bsmith, use NEEDINFO?)]

I do not think that this blocks the enabling of per-window private browsing in Firefox. I couldn't find another bug to track follow-ups that result from the private browsing work; if there is such a bug, then we can change the dependencies.

Fixing bug 739465 using Wan-Teh's second suggestion should fix this bug.

Comment 3

[Brian Smith (:briansmith, :bsmith, use NEEDINFO?)]

(In reply to Brian Smith (:bsmith) from comment #2)
> Fixing bug 739465 using Wan-Teh's second suggestion should fix this bug.

Er, rather, it would allow us to easily write a patch to fix this bug. Note that some race conditions would have to be dealt with, as described in bug 769288 comment 44.

Comment 4

[(no longer active)]

Not a blocker for per-window private browsing.

Comment 5

[Dana Keeler (she/her) (use needinfo) [:keeler] (on leave)]

This is predicated on having the ability to remove specific entries from the cache, rather than all of them. I'm not aware of a way to do this in NSS at the moment.