Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
ehPReth
on March 31, 2015
|
parent
|
context
|
favorite
| on:
Firefox 37 Release Notes
The check-in URL for heartbeat seems to be HTTP ("
http://self-repair.mozilla.org/%LOCALE%/repair"
). Will Firefox 37.0 automatically convert that to HTTPS (HSTS preload, etc) or is there an insecure redirect lurking?
fabrice_d
on March 31, 2015
[–]
It's a https url. Check the source:
http://mxr.mozilla.org/mozilla-central/source/browser/app/pr...
ehPReth
on March 31, 2015
|
parent
[–]
Is the 'mozilla-release' branch for the current 37.0 release? It shows 'http' instead of 'https':
https://mxr.mozilla.org/mozilla-release/source/browser/app/p...
fabrice_d
on March 31, 2015
|
root
|
parent
[–]
You're right. It was changed to https in
https://bugzilla.mozilla.org/show_bug.cgi?id=1138323
and will only end up in Firefox 39
ehPReth
on March 31, 2015
|
root
|
parent
[–]
Ah, I see. Thanks! Too bad it didn't land for 37.0 but glad to see it fixed for the future
Consider applying for YC's Summer 2026 batch! Applications are open till May 4
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
