Skip to content
This repository has been archived by the owner on Dec 11, 2019. It is now read-only.

Regression: Toggling shields does not re-enable HTTPSE #4220

Closed
alexwykoff opened this issue Sep 23, 2016 · 15 comments · Fixed by #4250
Closed

Regression: Toggling shields does not re-enable HTTPSE #4220

alexwykoff opened this issue Sep 23, 2016 · 15 comments · Fixed by #4250
Assignees
Labels
needs-info Another team member needs information from the PR/issue opener. regression stale

Comments

@alexwykoff
Copy link
Contributor

Did you search for similar issues before submitting this one?
Yes

Describe the issue you encountered:
When toggling the shield, HTTPSE was not re-enabled.

Expected behavior:
If the shields are up and HTTPSE is enabled, the site should load via https.

@bbondy
Copy link
Member

bbondy commented Sep 23, 2016

This is a URLbar update problem, the state shows it is actually upgrading to HTTPS

@bridiver
Copy link
Collaborator

bridiver commented Sep 23, 2016

this actually doesn't appear to be a urlbar update problem. When I look at the network traffic it is still going to http://www.apple.com after enabling shields. The brave panel shows 13 upgrades, but http://www.apple.com is not one of them

@bridiver
Copy link
Collaborator

it does work correctly on http://https-everywhere.badssl.com/ and updates the address bar which is unfortunate because I don't want to use http://www.apple.com in the test, but I'll figure out what the issue is first

@bbondy
Copy link
Member

bbondy commented Sep 24, 2016

This was reverted here, so re-opening
1d65e0b

@bbondy bbondy modified the milestones: 0.12.3dev, 0.12.2dev Sep 24, 2016
@bbondy
Copy link
Member

bbondy commented Sep 24, 2016

Also moving this to 0.12.3 since it's just an intermittent race condition that probably happened before as well.

@alexwykoff
Copy link
Contributor Author

This has been a part of every release test and has never had an issue before. If it was intermittent, it should have been noticed more.

@bridiver
Copy link
Collaborator

It is defiantly an intermittent issue. It is intermittent on Apple.com and not reproducible at badssl

On Sep 24, 2016, at 12:06 PM, Alex Wykoff notifications@github.com wrote:

This has been a part of every release test and has never had an issue before. If it was intermittent, it should have been noticed more.


You are receiving this because you were assigned.
Reply to this email directly, view it on GitHub, or mute the thread.

@bridiver
Copy link
Collaborator

I had actually identified a general race condition before this bug and I verified it when testing this

On Sep 24, 2016, at 12:06 PM, Alex Wykoff notifications@github.com wrote:

This has been a part of every release test and has never had an issue before. If it was intermittent, it should have been noticed more.


You are receiving this because you were assigned.
Reply to this email directly, view it on GitHub, or mute the thread.

@bridiver
Copy link
Collaborator

also as notes below the page is still on http and only the subresouces that loaded after the race were upgraded

On Sep 24, 2016, at 12:06 PM, Alex Wykoff notifications@github.com wrote:

This has been a part of every release test and has never had an issue before. If it was intermittent, it should have been noticed more.


You are receiving this because you were assigned.
Reply to this email directly, view it on GitHub, or mute the thread.

@bridiver
Copy link
Collaborator

I didn't actually check this because I had already verified the race condition with other methods, but you should see a different number of upgrades when it shows http vs https because some of the upgrades were Apple.com subresouces that should already be https when the page loads as https

On Sep 24, 2016, at 12:06 PM, Alex Wykoff notifications@github.com wrote:

This has been a part of every release test and has never had an issue before. If it was intermittent, it should have been noticed more.


You are receiving this because you were assigned.
Reply to this email directly, view it on GitHub, or mute the thread.

@bbondy bbondy modified the milestones: 0.12.4dev, 0.12.3dev Sep 26, 2016
@diracdeltas
Copy link
Member

i can no longer repro the original bug - turning shields off then on again and going to http://apple.com updates to https://apple.com as expected.

@diracdeltas diracdeltas added the needs-info Another team member needs information from the PR/issue opener. label Sep 28, 2016
@bridiver
Copy link
Collaborator

@diracdeltas there is a race condition so the issue is intermittent and we haven't done anything that would fix the underlying issue

@bbondy bbondy modified the milestones: 0.12.5dev, 0.12.4dev Oct 4, 2016
@bbondy
Copy link
Member

bbondy commented Oct 10, 2016

@bridiver you had a PR for this that we had to backout, did you ever get back to that?

@bbondy bbondy modified the milestones: 0.12.6dev, 0.12.5dev Oct 10, 2016
@bsclifton
Copy link
Member

bsclifton commented Oct 13, 2016

original commit was done w/ 35de6cf

and revert done w/ 1d65e0b #4267

IIRC, this caused some issues... one of them being the ledger not properly considering the status code (I believe because it doesn't get the response)

@bbondy bbondy removed this from the 0.12.6dev milestone Oct 18, 2016
@luixxiul
Copy link
Contributor

luixxiul commented Nov 7, 2017

As Apple enables HTTPS by default, let's close this issue. If the issue is still experienced on other sites, let's open a new issue for that.

@luixxiul luixxiul closed this as completed Nov 7, 2017
@luixxiul luixxiul added the stale label Nov 7, 2017
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
needs-info Another team member needs information from the PR/issue opener. regression stale
Projects
None yet
Development

Successfully merging a pull request may close this issue.

7 participants