1634947 - Firefox incorrectly warns that TLS 1.0/1.1 will be disabled in March 2020

Status: RESOLVED FIXED

(DevTools :: Console, defect, P2)

Description

[Kagami Rosylight [:saschanaz] (they/them)]

https://searchfox.org/mozilla-central/rev/b9a814e53b3b6f5cb665a78f4777868e7a16bfcd/dom/locales/en-US/chrome/security/security.properties#85

DeprecatedTLSVersion=This site uses a deprecated version of TLS that will be disabled in March 2020. Please upgrade to TLS 1.2 or 1.3.

This is not true anymore as the plan has changed because of COVID-19. This warning should be modified as such.

Comment 1

[Johann Hofmann [:johannh]]

Argh, I should have caught this in bug 1512505, especially since we decided not to name a specific date in bug 1579285 out of caution...

Dana, should we just remove that date now?

Comment 2

[Thyla van der Merwe]

Yes, this date should be removed, thank you, but we still want to encourage upgrading to higher versions of TLS.

Comment 3

[Dana Keeler (she/her) [:keeler]]

^

Comment 4

[Johann Hofmann [:johannh]]

Prathiksha has time to take this. Thyla, we would need a new string. Can you think of something? Should we just remove "in March 2020"?

Comment 5

[Thyla van der Merwe]

Thanks Johann, Prathiksha. To avoid being vague about the timing, I think the string should read: "This site uses a deprecated version of TLS. Please upgrade to TLS 1.2 or 1.3." If we just we remove the "in March 2020", then the question of when it will be disabled might arise for the reader. We do have a plan as to the timing but perhaps we end up having to move it out further. If either of you think this should keep the "and will be disabled" is necessary, then do say.

Comment 6

[:prathiksha]

Attachment: Bug 1634947 - Update the TLS deprecated error message in Firefox. r?johannh

Comment 7

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/0440fa5863b2
Update the TLS deprecated error message in Firefox. r=johannh,necko-reviewers,valentin

Comment 8

[Dorel Luca [:dluca]]

Backed out changeset 0440fa5863b2 (bug 1634947) for Devtools failures in browser_webconsole_certificate_messages.js . CLOSED TREE

Log:
https://treeherder.mozilla.org/logviewer.html#/jobs?job_id=303936594&repo=autoland&lineNumber=2864

Push with failures:
https://treeherder.mozilla.org/#/jobs?repo=autoland&group_state=expanded&revision=0440fa5863b23bc2750e3184a9fd6d65978ad031

Backout:
https://hg.mozilla.org/integration/autoland/rev/312302bf12d8073d8dedf8380e31d2b5032110e0

Comment 9

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/41522eadf227
Update the TLS deprecated error message in Firefox. r=johannh,necko-reviewers,valentin

Comment 10

[Razvan Maries]

https://hg.mozilla.org/mozilla-central/rev/41522eadf227

Comment 11

[Thyla van der Merwe]

Kohei, this should not be tracked at part of the COVID-19 bug that states 'after Fx 79'. The timing of TLS removal is being coordinated with other browser vendors and the TLS removal team will decide on the timeline.