Brian Smith
|
123a9716ca
|
Bug 952863, Part 2: Remove dead code for non-ECDHE TLS False Start, r=keeler
--HG--
extra : rebase_source : 47ee95682f769b8e10aaf55b0f4fccfef1fcdea0
|
2014-12-10 10:13:18 -08:00 |
|
Masatoshi Kimura
|
b95c85162f
|
Bug 1084025 - Add telemetry to measure failures due to not falling back. r=keeler
|
2014-12-09 07:19:05 +09:00 |
|
Masatoshi Kimura
|
8277eea9e9
|
Bug 1092998 - Deal with "cipher mismatch intolerant" servers. r=keeler
|
2014-11-27 07:19:11 +09:00 |
|
Masatoshi Kimura
|
bcda188339
|
Bug 1088915 - Stop offering RC4 in the first handshakes. r=keeler
|
2014-10-22 01:11:29 +09:00 |
|
Martin Thomson
|
2aa2c784b9
|
Bug 1088950 - Fix handling of inappropriate_fallback alert. r=keeler
|
2014-10-27 17:47:00 +01:00 |
|
Martin Thomson
|
e4182ac689
|
Bug 1083058 - Adding pref to control TLS version fallback, r=keeler
From af667978f8915e6ebfaf02f8967b3d320d409a24 Mon Sep 17 00:00:00 2001
---
netwerk/base/public/security-prefs.js | 1 +
security/manager/ssl/src/nsNSSIOLayer.cpp | 21 +++++-
security/manager/ssl/src/nsNSSIOLayer.h | 2 +
.../manager/ssl/tests/gtest/TLSIntoleranceTest.cpp | 76 +++++++++++++++++++---
4 files changed, 90 insertions(+), 10 deletions(-)
|
2014-10-02 16:36:48 -07:00 |
|
Patrick McManus
|
9c3bce6805
|
bug 1003448 - HTTP/2 Alternate Service and Opportunistic Security [1/2 PSM] r=keeler
|
2014-08-20 16:30:16 -04:00 |
|
Phil Ringnalda
|
145d867409
|
Backed out 2 changesets (bug 1003448) since their dependency was backed out
CLOSED TREE
Backed out changeset 61f98b1d29f9 (bug 1003448)
Backed out changeset 8e947d1636f1 (bug 1003448)
|
2014-10-04 20:10:19 -07:00 |
|
Patrick McManus
|
235b069e72
|
bug 1003448 - HTTP/2 Alternate Service and Opportunistic Security [1/2 PSM] r=keeler
|
2014-08-20 16:30:16 -04:00 |
|
Martin Thomson
|
e3fc75fe11
|
Bug 1075991 - Remember version intolerance reason code, r=keeler
|
2014-10-03 11:01:24 -07:00 |
|
Trevor Saunders
|
d75ed5bf7f
|
bug 1059490 - mark more classes MOZ_FINAL r=froydnj
|
2014-08-27 14:26:48 -04:00 |
|
J. Ryan Stinnett
|
ce8794da11
|
Bug 1040130 - Allow specifying a client cert for sockets. r=keeler, r=mcmanus
|
2014-08-07 16:32:00 -04:00 |
|
Patrick McManus
|
f8a14606da
|
bug 1027720 - enforce h2 requirement that sever uses aead r=hurley r=dkeeler
|
2014-08-04 16:54:10 -04:00 |
|
Benoit Jacob
|
a0d5e2d502
|
Bug 1035394 - Fix dangerous public destructors in security/ - r=bsmith
|
2014-07-08 17:23:18 -04:00 |
|
Patrick McManus
|
1e673cbacc
|
bug 1006804 - psm interface for kea size and make kea available in preliminary handshake r=keeler r=honzab
|
2014-05-06 17:22:25 -04:00 |
|
David Keeler
|
bf37f06673
|
bug 969479 - only prevent TLS fallback for STARTTLS r=briansmith
|
2014-02-20 15:14:32 -08:00 |
|
Brian Smith
|
188876d1dc
|
Bug 961454: Clean up whitespace in key PSM files, r=keeler, r=cviecco
--HG--
extra : rebase_source : 53f14cc6f97814eb9913a1ddad1a19631e2af08a
|
2014-01-21 17:30:44 -08:00 |
|
Patrick McManus
|
0ef97ed6fd
|
bug 951199 - Interface for Socket Level Access to TLS Version Used r=dkeeler r=bsmith
|
2013-10-09 17:21:48 -07:00 |
|
Patrick McManus
|
a72d594dd7
|
Bug 942729, Part 2: Remove unused expected symmetric cipher mechanism, r=briansmith
--HG--
extra : rebase_source : 9630808b663d6a670c2e45d242177a640817f2ee
|
2013-11-25 18:12:40 -05:00 |
|
Brian Smith
|
da55c6102d
|
Bug 942729, Part 1: Re-enable TLS False Start, r=mcmanus
--HG--
extra : rebase_source : 9908b1cbc3a30e9868739a10a705de8dbf30c5e1
|
2013-11-20 13:49:33 -08:00 |
|
Chris Peterson
|
1d6f9e7c88
|
Bug 937459 - Remove unused private fields from nsNSSSocketInfo class. r=briansmith
|
2013-11-11 14:06:29 -08:00 |
|
Brian Smith
|
3842b267a1
|
Bug 754356: Remove TLS intolerance timeout logic, r=honzab
--HG--
extra : rebase_source : 49c4563800ce9727e11e08d857db44c1294a074b
|
2013-10-15 01:14:50 -07:00 |
|
Brian Smith
|
50c4793f62
|
Backed out changeset 673ca84a9171 because of wrong bug number in commit message
--HG--
extra : rebase_source : 32c92c4cb98097caf8805fdae98d9c435580c8c9
|
2013-10-26 00:51:47 -07:00 |
|
Brian Smith
|
bdc5f15a1f
|
Bug 450280: Remove timeout logic for TLS intolerance, r=honzab
|
2013-10-15 01:14:50 -07:00 |
|
Brian Smith
|
71db6985d3
|
Bug 839310: Expand TLS intolerance logic to work for versions beyond TLS 1.0, r=keeler, r=wtc
--HG--
extra : rebase_source : b83a610d08abb428f0f6894fa935712f820ddfe8
|
2013-10-11 00:17:19 -07:00 |
|
Ehsan Akhgari
|
b9980dbc97
|
Bug 579517 follow-up: Remove NSPR types that crept in
|
2013-08-02 12:09:54 -04:00 |
|
Patrick McManus
|
1fdcea773a
|
bug 658222 - Enable TLS False Start (PSM) r=bsmith
--HG--
extra : rebase_source : ac9f77ba73a0a902f4b6aa8d52add7d52efb1b53
|
2013-06-28 16:58:28 -04:00 |
|
Patrick McManus
|
a97c6a3a21
|
bug 848139 - telemetry for tls server hello size r=honzab
--HG--
extra : rebase_source : 5e8d1fa5e86ed7845cb196ad84539a6be024ca73
|
2013-03-26 20:06:15 -04:00 |
|
Patrick McManus
|
512a50e970
|
bug 845934 Telemetry for TLS Resumption rates r=honzab
--HG--
extra : rebase_source : 185c871273dcca7a84aafea5dc818033fcda945d
|
2013-03-26 20:06:14 -04:00 |
|
Josh Matthews
|
26bf429881
|
Bug 769288 - Part 7: Use separate SSL session cache entries for private connections. r=mayhemer
|
2012-12-07 17:57:53 -05:00 |
|
Josh Matthews
|
b36633903e
|
Bug 769288 - Part 1: Make PSM more amenable to storing concurrent private and non-private data. r=bsmith
|
2012-12-06 22:05:27 -05:00 |
|
Ed Morley
|
6800e12c21
|
Backout d9336f8c0f6c, 761ff8b47a4e, 072da0be4236, ee2822d2eab9, 38cd815da29a, a80ec6b90878 & 9e9281ce1b63 (bug 769288) on suspicion of causing bug 821701 on a CLOSED TREE
|
2012-12-14 15:07:48 +00:00 |
|
Josh Matthews
|
fd92af3596
|
Bug 769288 - Part 7: Use separate SSL session cache entries for private connections. r=mayhemer
|
2012-12-07 17:57:53 -05:00 |
|
Josh Matthews
|
0f271f8e13
|
Bug 769288 - Part 1: Make PSM more amenable to storing concurrent private and non-private data. r=bsmith
|
2012-12-06 22:05:27 -05:00 |
|
Ehsan Akhgari
|
1dcb5ba1bb
|
Backed out 7 changesets (bug 769288) because of leaks
Backed out changeset b2fb475b6e4e (bug 769288)
Backed out changeset 912331d0c2fd (bug 769288)
Backed out changeset 6d8d78bd56a9 (bug 769288)
Backed out changeset e75cd1e1fca3 (bug 769288)
Backed out changeset e10c24f10bd2 (bug 769288)
Backed out changeset 7b0fdedb4fa9 (bug 769288)
Backed out changeset 42b468942a84 (bug 769288)
|
2012-12-12 00:05:49 -05:00 |
|
Josh Matthews
|
9bf57bf266
|
Bug 769288 - Part 7: Use separate SSL session cache entries for private connections. r=mayhemer
|
2012-12-07 17:57:53 -05:00 |
|
Josh Matthews
|
92dd4d5edc
|
Bug 769288 - Part 1: Make PSM more amenable to storing concurrent private and non-private data. r=bsmith
|
2012-12-06 22:05:27 -05:00 |
|
Josh Matthews
|
94a15456b1
|
Backed out changeset fca88031cd47 (bug 769288)
|
2012-12-08 00:21:58 -05:00 |
|
Josh Matthews
|
5a9c8601c0
|
Backed out changeset 9d37e0f7a2fc (bug 769288)
|
2012-12-08 00:21:47 -05:00 |
|
Josh Matthews
|
95c262c0d4
|
Bug 769288 - Part 7: Use separate SSL session cache entries for private connections. r=mayhemer
|
2012-12-07 17:57:53 -05:00 |
|
Josh Matthews
|
b5f51a281f
|
Bug 769288 - Part 1: Make PSM more amenable to storing concurrent private and non-private data. r=bsmith
|
2012-12-06 22:05:27 -05:00 |
|
Josh Matthews
|
753a9e6a62
|
Backed out changeset 3008e6e5476f (bug 769288)
|
2012-12-07 19:45:57 -05:00 |
|
Josh Matthews
|
dd792dcc73
|
Backed out changeset d0f828b1cd26 (bug 769288)
|
2012-12-07 19:45:50 -05:00 |
|
Josh Matthews
|
ab1ce4e14c
|
Bug 769288 - Part 7: Use separate SSL session cache entries for private connections. r=mayhemer
|
2012-12-07 19:12:26 -05:00 |
|
Josh Matthews
|
1aa569d5fd
|
Bug 769288 - Part 1: Make PSM more amenable to storing concurrent private and non-private data. r=bsmith
|
2012-12-07 19:09:41 -05:00 |
|
Josh Matthews
|
cb22bd8de5
|
Bug 812794 - Make docshell STS usage use existing PB knowledge instead of digging in SSL internals. r=bz/bsmith
|
2012-11-28 11:24:03 -05:00 |
|
Patrick McManus
|
2f1cf659c1
|
bug 807435 telemetry for ssl handshake time r=bsmith r=honzab
|
2012-11-22 15:36:59 -05:00 |
|
Josh Matthews
|
e0bfa38e3b
|
Bug 722979 - Add privacy status argument to relevant nsIStrictTransportSecurityService methods. r=bsmith sr=biesi
|
2012-06-30 07:34:17 -07:00 |
|
Ed Morley
|
0687c2b3aa
|
Backout e123e0173185, 326ed6f1dc9e & 7c2c9c988869 (bug 722979) for mochitest-a11y failures
|
2012-11-16 15:06:13 +00:00 |
|
Josh Matthews
|
cdf21f169e
|
Bug 722979 - Add privacy status argument to relevant nsIStrictTransportSecurityService methods. r=bsmith sr=biesi
|
2012-06-30 07:34:17 -07:00 |
|