Networking/Archive/IndividualPriorities

Individual Priorities

Only networking team members should be changing priorities. If you have questions about priorities or anything else on this list please email the relevant person or Josh Aas (networking team manager).

Michal Novotny

1. bug 529733, Corrupted cache crash
2. bug 666059, Only use memory cache for private browsing
3. Stop deleting disk cache after a crash
4. Help with mobile disk cache

Bjarne Herland

1. Awaiting review bug 667593
2. Some work on bug 668207
3. Some work on bug 628998
4. Follow bug 669140
5. Work on mobile cache (waiting for bugs 668349 and 661282)
6. Fix bug 661115.
7. Work on bugs 575928, 613159
8. Understand implications and consequences of bug 602611 better

Jason Duell

1. Finish review of 667853: Missing close() event if websocket::init fails
2. Cache slow to "clear" after a crash 670911: implement slow/delayed delete
3. Some other work to make freezing on large cache I/O less likely
4. follow up HTTP headers work 669259.
5. review Nick's e10s error-handling for FTP 657076
6. Some websockets code refactoring
7. mobile cache research/redesign.
8. lots of little bugs and more reviews...

Brian Smith

• Ongoing: Help intern David Keeler on DNSSEC-based TLS (Keelerification).

Right Now:

1. Bug 650858 and bug 619198 - Instantiating nsICertOverrideService at startup throws NS_ERROR_XPC_GS_RETURNED_FAILURE and makes Firefox unusable / nsStrictTransportSecurityService can be created off main thread and uses non-threadsafe nsPermissionManager
2. Bug 624514 - PSM accesses pref service off the main thread - have patch, need to test.
3. Bug 640625 - PKCS#12 does not iterate hashing - patch needs to be checked in
4. Bug 593077 - Remove SSL 2.0 support - almost done, need to tweak patch
5. Bug 665814 - [hidden] - Need to update patch based on feedback from Oracle
6. bug 590364 - Stop accepting MD5 as a hash algorithm by June 30, 2011
7. bug 650355 - Stop accepting MD5 as a hash algorithm in PSM on June 30, 2011
8. bug 674147 - Remove the SSL thread - preliminary WIP patch in bug. Depends on bugs that have patches.
9. Bug 511393 - Use multiple SSL worker threads - looks like we will WONTFIX this in favor of removing the SSL thread.
10. Bug 668397 - hidden - patch reviewed and WTC landed the critical part.
11. Bug 674148 - De-serialize certificate chain validations (needed only if we choose to fix bug 674147 instead of fixing bug 511393).
12. Integrate NSS 3.12.11 into mozilla-central.

I will be on PTO from July 27th through Aug 1st. I will be at Blackhat August 2nd through August 5th. I will be at USENIX August 10th - 12th.

Later:

1. 664542 - hidden
2. 508633 - Unresponsive OCSP server should not be treated as revocation
3. Test PSM using libpkix vs current cert chain building using SSLLabs and/or EFF SSL Observatory data sets.
4. Bug 660749 - PSM doesn't revalidate certificates of resources from the cache.
5. Remove support for weak crypto (https://www.wsjsafehouse.com/)
6. Fix bug 650307 - Certificate chain is verified twice for EV certificates
7. Fix bug 481656 - Change cert viewer to validate/build cert chains the same way they are used for trust decisions
8. Fix bug 650296 - PSM may report a different certificate error than what was originally encountered
9. Drive certificate exclusion standard (DANE, or a lightweight DANE-like mechanism) forward
10. Any libpkix fixes identified during libpkix testing.
11. Fix bug 651246 - Make libpkix-based certificate path building/validation the default in PSM (bigger project than I initially expected; see growing list of blocking bugs. Will require lots of testing.)
12. Review rrelyea's patches for bug 470994 (and related bugs) - Complete active distrust in NSS
13. TLS compression (Google already wrote patches, but they may require some cleanup and we need to enable the feature in PSM.)
14. Patches to NSS needed to support NSS/PSM startup time improvements (bug 648407, bug 648435, bug 648431)
15. Review bug 360420 - Implement OCSP Stapling, and follow-ups to enable the feature in PSM
16. Finalize NSS release and import into mozilla-central
17. PSM startup time improvements (bug 648407, bug 648435, bug 648431)
18. Drive decision on acceptable cert validation staleness (no bug, related to bug 643916, will try to pass off to Gervase)
19. Implement subscription-based blocklisting of certs via update ping (Bug 647868, bug 643982) - High risk of slipping
20. Fix bug 646156 - Delete or Distrust doesn't work with multiple selected certs

Honza Bambas

Now

1. Review pipelining patches from Patrick McManus (large backlog)
2. Basic network timing data for telemetry:
   1. bug 658894 - HTTP basic telemetry
   2. bug 662555 - Http channel timing race condition
   3. bug 539093 - Implement high-resolution platform timers for Tier I platforms
3. Review bug 507361 - localStorage doesn't work in file:/// documents
4. Bug 654081 - Firefox 4 doesn't cache font file in TTF or WOFF format (analyze)
5. Bug 652440 - auto dial helper does not pop up when open web page
6. Bug 480878 - Generic crash nsSSLThread::requestRecvMsgPeek (depends on Brian's work on removing the SSL thread)
7. Offline Application Cache future, can we turn this to an efficient optimization?
8. Telemetry - next steps: measure more correctly, move some measurements to lower levels

Next

1. HTTP Preconnections, bug 634278
2. DNS hostname cache (resolve hosts previously needed by document-level host)
3. Mixed content detection
4. Bug 650279 - Add timing interface for SSL handshake
5. Bug 657584 - Optionally record & return details timing information for certificate path validation / revocation checking
6. Bug 562917 - implement captive portal detection

Nick Hurley

1. Work on plans for testing infrastructure.
2. Fix bugs 41489, 589292, 639959

Patrick McManus

1. SPDY 528288
2. Websockets - content API is now out of date
3. Get HTTP pipelining patches into the tree. tracking bug 603503 which includes sub bugs 232030 447866 597684 599164 602518 603505 603506 603508 603512 603513 603514 615342 631801 (this one needs an update by me) 632496. Primarily waiting on review cycle from honzab, also on operations to do something with 648091. I also continue to actively test and tweak these patches and have recently tried (with mixed success) to break them down and make them a little more accessible. That is ongoing work.
4. DNS bug where multiple A records for a single hostname are not properly handled in the case of failures. 641937. Recently updated - waiting review
5. After a captive portal releases you there might still be a problem due to long term persistent connections - 628561. I have a patch that will release persistent connections based on shift-reload but it got backed out due to a tp4 regression on win7 only (wtf?).. I'm trying to confirm that this is fixed because of a fix in syn retry
6. 649139 first network access on mobile is slow with mark finkle.
7. telemetry - add to necko:telemetry and probably actually try and capture a single piece of data as a proof of concept using mark's add-on.

Unassigned Priorities

• TLS False Start, bug 658222