Closed Bug 840682 Opened 12 years ago Closed 12 years ago

Use HTTPS instead of HTTP in the links to crash reports in about:crashes

Categories

(Toolkit :: Crash Reporting, defect)

defect
Not set
normal

Tracking

()

VERIFIED FIXED
mozilla22

People

(Reporter: briansmith, Assigned: raymondlee)

References

Details

Attachments

(1 file, 1 obsolete file)

+++ This bug was initially created as a clone of Bug #771788 +++ The default breakpad.reportURL is http://crash-stats.mozilla.com/report/index/ Crash reports contain personally identifiable information and we should send them over HTTPS. https://crash-stats.mozilla.com already supports HTTPS so this might be a very simple change to make. (This was reported to a user as part of Bug #771788. I'm just splitting that bug up into separate bugs.)
breakpad.reportURL is only used to generate the links to crash reports in about:crashes. The data is POSTed to the ServerURL from application.ini: http://mxr.mozilla.org/mozilla-central/source/build/application.ini#44
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → INVALID
(In reply to Ted Mielczarek [:ted.mielczarek] from comment #1) > breakpad.reportURL is only used to generate the links to crash reports in > about:crashes. The data is POSTed to the ServerURL from application.ini: > http://mxr.mozilla.org/mozilla-central/source/build/application.ini#44 Since http://crash-stats.mozilla.com/ seems to redirect to https anyways, is there any reason not to link directly to https rather than http?
Status: RESOLVED → REOPENED
Resolution: INVALID → ---
That's fine, but this bug is pretty confused.
Ted, thanks for correcting me. I agree the bug is confusing as reported. I corrected the summary, at least. I agree with Gavin that we might as well use https:// links since the site is doing the redirect to https:// anyway.
Keywords: privacy
OS: Linux → All
Hardware: x86_64 → All
Summary: Use HTTPS instead of HTTP for sending breakpad crash reports (breakpad.reportURL) → Use HTTPS instead of HTTP in the links to crash reports in about:crashes
Version: unspecified → Trunk
Attached patch v1 (obsolete) — Splinter Review
Attachment #720534 - Flags: review?(gavin.sharp)
Attachment #720534 - Flags: review?(gavin.sharp) → review+
Assignee: nobody → raymond
Attachment #720534 - Attachment is obsolete: true
Keywords: checkin-needed
Status: REOPENED → ASSIGNED
Status: ASSIGNED → RESOLVED
Closed: 12 years ago12 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla22
Can you fix all the other HTTP links so they go to HTTPS too?
We're tracking that in bug 771788.
Verified fixed on Windows 7 64bit, Ubuntu 13.10 and Mac OSX 10.8.5 using latest Nightly 34.0a1.
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: