gecko-dev/dom/webtransport
Marten Richter ca85c42741 Bug 1873263 - WebTransport: Fix serverCertificateHashes Implementation r=kershaw,necko-reviewers,keeler
The current serverCertificateHashes implementation does not follow the
WebTransport specification, that introduced serverCertificateHashes
as a tool to replace certificate chain verification.
Instead it introduced the hashes as an additional check.
This patch moves the check to the Http3Session object and modifies
the connection manager' hashes to prevent crossSite certificate
poisoning. It is - as the WebTransport Implementation in Firefox -
currently limited to http3 only.
However, since the hashes live on the ConnectionEntries,
it should be possible to extend this in the future.

Differential Revision: https://phabricator.services.mozilla.com/D197857
2024-03-05 10:39:29 +00:00
..
api Bug 1880338: null-check child ptr in WebTransport shutdown r=necko-reviewers,valentin 2024-02-14 20:54:15 +00:00
child Bug 1841133: Add null-checks for mTransport in WebTransport r=necko-reviewers,kershaw DONTBUILD 2023-06-30 20:34:54 +00:00
parent Bug 1873263 - WebTransport: Fix serverCertificateHashes Implementation r=kershaw,necko-reviewers,keeler 2024-03-05 10:39:29 +00:00
shared Bug 1867360 - Require toplevel protocols to specify which processes they expect to be bound in, r=decoder,ipc-reviewers,necko-reviewers,media-playback-reviewers,profiler-reviewers,win-reviewers,aosmond,rkraesig,mccr8,kershaw 2024-01-18 23:07:18 +00:00
test Bug 1824376 - Instantiate the DNS service to prevent rare intermittent webtransport connection rejection. r=valentin 2024-01-18 18:33:43 +00:00
moz.build Bug 1817754 - Associate dom/webtransport code with DOM::Networking r=necko-reviewers,kershaw 2023-02-21 11:59:31 +00:00