Confirmed users
308
edits
Security/Features/SSL Error Reporting: Difference between revisions
Jump to navigation
Jump to search
no edit summary
No edit summary |
No edit summary |
||
| Line 1: | Line 1: | ||
{{FeatureStatus | {{FeatureStatus | ||
|Feature name=SSL Error Reporting | |Feature name=SSL Error Reporting | ||
|Feature stage=Design | |Feature stage=Design | ||
|Feature status=In progress | |Feature status=In progress | ||
| Line 13: | Line 13: | ||
{{FeaturePageBody | {{FeaturePageBody | ||
|Feature overview=Add a "Report to Mozilla" option to the "Untrusted Connection" error page. | |Feature overview=Add a "Report to Mozilla" option to the "Untrusted Connection" error page. | ||
|Feature users and use cases=A user browses to a secure website, but gets the warning: "This Connection is Untrusted". The user views the technical details and sees that the error is due to an invalid security certificate, so they click on the option to send the error information to Mozilla for analysis. | |Feature users and use cases=A user browses to a secure website, but gets the warning: "This Connection is Untrusted". The user views the technical details and sees that the error is due to an invalid security certificate, so they click on the option to send the error information to Mozilla for analysis. | ||
|Feature dependencies=This feature is not dependent on anything else, but Cert Pinning will need this capability. | |Feature dependencies=This feature is not dependent on anything else, but Cert Pinning will need this capability. | ||
| Line 27: | Line 22: | ||
|Feature ux design=Update the "Untrusted Connection" error page. | |Feature ux design=Update the "Untrusted Connection" error page. | ||
|Feature implementation plan=Information needed: | |Feature implementation plan=Information needed: | ||
* Entire certificate chain | * Entire certificate chain as sent by server | ||
* Domain of bad connection | * Domain of bad connection | ||
* Error Code | * Error Code | ||
* User Agent, IP, Timestamp | * User Agent, IP, Timestamp | ||
|Feature security review= {{Bug|846502}} | |Feature security review={{Bug|846502}} | ||
|Feature privacy review= {{Bug|846506}} | |Feature privacy review={{Bug|846506}} | ||
|Feature implementation notes=Use Bagheera client. There is Bagheera client support for both desktop (as of Fx21) and Android (Fx23/24), so we should be able to generate a JSON payload and submit it for later analysis. | |Feature implementation notes=Use Bagheera client. There is Bagheera client support for both desktop (as of Fx21) and Android (Fx23/24), so we should be able to generate a JSON payload and submit it for later analysis. | ||
}} | }} | ||
{{FeatureInfo | {{FeatureInfo | ||
|Feature priority= | |Feature priority=P1 | ||
|Feature theme=Security Leadership | |Feature theme=Security Leadership | ||
|Feature roadmap=Security | |Feature roadmap=Security | ||