Open Bug 1316076 Opened 8 years ago Updated 2 years ago

add_connection_test should modify "network.dns.localDomains" rather than clobbering it entirely

Categories

(Core :: Security: PSM, defect, P3)

defect

Tracking

()

Tracking Status
firefox52 --- affected

People

(Reporter: keeler, Unassigned)

Details

(Whiteboard: [psm-backlog])

Currently add_connection_test sets the pref "network.dns.localDomains" to the host it's connecting to, which means that OCSP requests caused by that connection must go to localhost (or the same domain), neither of which is really realistic. It would be best to non-destructively modify the pref so other "hosts" can be connected to while a connection test is occurring.
Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.