Conversation
- Everything except the saving function seems to work, though
…into better-obs-whitelisting
…into better-obs-whitelisting
There was a problem hiding this comment.
Then it seems like we need https://developer.mozilla.org/en-US/docs/Mozilla/Tech/XPCOM/Reference/Interface/nsITimer ?
There was a problem hiding this comment.
I don't think we need nsITimer. This code lazily updates the whitelist whenever an amount of time has expired and there's a new submission about to be made to the observatory. One silly thing is that the cert update is async in the background while the observatory submission continues. It might make sense to chain callbacks so that the submission logic waits for maybeUpdateCertWhitelist() to finish its async work so that the submission uses the very latest whitelist. However that is going to be a bit ugly...
There was a problem hiding this comment.
OK, the async version would look something like this, though that's untested. I'm inclined to just merge this branch without the async acrobatics for now.
Better obs whitelisting The less ugly but also less async version
2 participants
Hi Yan/Mike,
This is my code to fetch copies of the whitelist periodically from s.eff.org, rather than having every single client submit each new common cert as it is deployed.
Should massively reduce the dynamic workload on the observatory server, at the expense of a new static load at s.eff.org.