4 ms·
The check-in URL for heartbeat seems to be HTTP ("http://self-repair.mozilla.org/%LOCALE%/repair" http://self-repair.mozilla.org/%LOCALE%/repair"). Will Firefox
by ehPReth 12y ago
The check-in URL for heartbeat seems to be HTTP ("http://self-repair.mozilla.org/%LOCALE%/repair" http://self-repair.mozilla.org/%LOCALE%/repair"). Will Firefox 37.0 automatically convert that to HTTPS (HSTS preload, etc) or is there an insecure redirect lurking?
- fabrice_d 12y agoIt's a https url. Check the source: http://mxr.mozilla.org/mozilla-central/source/browser/app/profile/firefox.js?rev=77a2c0f13869#1029 http://mxr.mozilla.org/mozilla-central/source/browser/app/pr...
- ehPReth 12y agoIs the 'mozilla-release' branch for the current 37.0 release? It shows 'http' instead of 'https': https://mxr.mozilla.org/mozilla-release/source/browser/app/profile/firefox.js#1036 https://mxr.mozilla.org/mozilla-release/source/browser/app/p...
- fabrice_d 12y agoYou're right. It was changed to https in https://bugzilla.mozilla.org/show_bug.cgi?id=1138323 https://bugzilla.mozilla.org/show_bug.cgi?id=1138323 and will only end up in Firefox 39
- ehPReth 12y agoAh, I see. Thanks! Too bad it didn't land for 37.0 but glad to see it fixed for the future