Bug 1455249 - Enable signature verification by default in RemoteSettings r?mgoodwin draft
authorMathieu Leplatre <mathieu@mozilla.com>
Thu, 19 Apr 2018 16:16:08 +0200
changeset 785063 56588b7a9b20fd43119631a7e355986105181bc6
parent 783745 26d6282bdbe03b9a125f302a3e2daeff28a9eddd
push id107113
push usermleplatre@mozilla.com
push dateThu, 19 Apr 2018 14:16:31 +0000
reviewersmgoodwin
bugs1455249
milestone61.0a1
Bug 1455249 - Enable signature verification by default in RemoteSettings r?mgoodwin MozReview-Commit-ID: IsJUXgptEMl
modules/libpref/init/all.js
--- a/modules/libpref/init/all.js
+++ b/modules/libpref/init/all.js
@@ -2505,17 +2505,17 @@ pref("security.view-source.reachable-fro
 // If set to true, in some limited circumstances it may be possible to load
 // privileged content in frames inside unprivileged content.
 pref("security.allow_chrome_frames_inside_content", false);
 
 // Services security settings
 pref("services.settings.server", "https://firefox.settings.services.mozilla.com/v1");
 pref("services.settings.changes.path", "/buckets/monitor/collections/changes/records");
 pref("services.settings.default_bucket", "main");
-pref("services.settings.default_signer", "");
+pref("services.settings.default_signer", "remote-settings.content-signature.mozilla.org");
 
 // Blocklist preferences
 pref("extensions.blocklist.enabled", true);
 // OneCRL freshness checking depends on this value, so if you change it,
 // please also update security.onecrl.maximum_staleness_in_seconds.
 pref("extensions.blocklist.interval", 86400);
 // Required blocklist freshness for OneCRL OCSP bypass
 // (default is 1.25x extensions.blocklist.interval, or 30 hours)