Brian Smith (:briansmith, :bsmith, use NEEDINFO?) Reporter
	Description • 12 years ago

+++ This bug was initially created as a clone of Bug #771788 +++

The default breakpad.reportURL is http://crash-stats.mozilla.com/report/index/

Crash reports contain personally identifiable information and we should send them over HTTPS.

https://crash-stats.mozilla.com already supports HTTPS so this might be a very simple change to make.

(This was reported to a user as part of Bug #771788. I'm just splitting that bug up into separate bugs.)

	(not currently active) Ted Mielczarek
	Comment 1 • 12 years ago

breakpad.reportURL is only used to generate the links to crash reports in about:crashes. The data is POSTed to the ServerURL from application.ini:
http://mxr.mozilla.org/mozilla-central/source/build/application.ini#44

	:Gavin Sharp [email: gavin@gavinsharp.com]
	Comment 2 • 12 years ago

(In reply to Ted Mielczarek [:ted.mielczarek] from comment #1)
> breakpad.reportURL is only used to generate the links to crash reports in
> about:crashes. The data is POSTed to the ServerURL from application.ini:
> http://mxr.mozilla.org/mozilla-central/source/build/application.ini#44

Since http://crash-stats.mozilla.com/ seems to redirect to https anyways, is there any reason not to link directly to https rather than http?

	(not currently active) Ted Mielczarek
	Comment 3 • 12 years ago

That's fine, but this bug is pretty confused.

	Brian Smith (:briansmith, :bsmith, use NEEDINFO?) Reporter
	Comment 4 • 12 years ago

Ted, thanks for correcting me. I agree the bug is confusing as reported. I corrected the summary, at least. I agree with Gavin that we might as well use https:// links since the site is doing the redirect to https:// anyway.

	Ryan VanderMeulen [:RyanVM]
	Comment 7 • 12 years ago

https://hg.mozilla.org/integration/mozilla-inbound/rev/f56acd2dc690

	Ryan VanderMeulen [:RyanVM]
	Comment 8 • 12 years ago

https://hg.mozilla.org/mozilla-central/rev/f56acd2dc690

	Eldmannen
	Comment 9 • 12 years ago

Can you fix all the other HTTP links so they go to HTTPS too?

	:Gavin Sharp [email: gavin@gavinsharp.com]
	Comment 10 • 12 years ago

We're tracking that in bug 771788.

	Camelia Badau [:cbadau], Desktop QA
	Comment 11 • 10 years ago

Verified fixed on Windows 7 64bit, Ubuntu 13.10 and Mac OSX 10.8.5 using latest Nightly 34.0a1.