Add an API for parent process JS to fetch certificate information per browser
Categories
(Firefox :: Security, enhancement, P1)
Tracking
()
| Tracking | Status | |
|---|---|---|
| firefox69 | --- | fixed |
People
(Reporter: johannh, Assigned: johannh)
References
(Blocks 1 open bug)
Details
Attachments
(1 file)
|
(deleted),
text/x-phabricator-request
|
Details |
Conversations around enabling the new Certificate Viewer Project (bug 1553524) make me realize that we might need an easy way for the parent process to fetch certificate information from the child, with the following requirements:
- We need to be able to fetch both failed and successful certificates
- It would be nice to be able to fetch for any subframe on the page
Currently we only provide the secInfo object on the browser.securityUI object which is added by WebProgress and this is a bit unwieldy, IMO. If we had this on demand we might even be able to avoid serializing the whole certificate chain on every SecurityChange (https://searchfox.org/mozilla-central/rev/7556a400affa9eb99e522d2d17c40689fa23a729/toolkit/modules/WebProgressChild.jsm#146) and only send EV-related data instead.
This could also be used to fix 17 year old bug 149207, if we wanted to...
|
Assignee | |
Comment 1•5 years ago
|
||
This adds an API for fetching security info per frame, no matter if we have
a certificate error or a valid certificate.
I tried to make this work in a Fission-compatible way, let me know if this
is the right approach.
|
||
Comment 3•5 years ago
|
||
| bugherder | ||
Description
•