New issue
Advanced search Search tips

Issue 632218 link

Starred by 2 users

Issue metadata

Status: Fixed
Owner:
Closed: Dec 2016
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: All
Pri: 2
Type: Feature
Team-Security-UX



Sign in to add a comment

Certificate reporting: report client timestamp at the time the interstitial is constructed

Project Member Reported by est...@chromium.org, Jul 28 2016

Issue description

Safe Browsing Extended Reporting certificate reports contain the local system time at the time the report is sent (which is when the interstitial is dismissed). However, this sometimes makes things confusing on the analysis side, because if the user fixes the clock while being shown a bad-clock interstitial, the report will show an accurate client timestamp, rather than the inaccurate time that caused the error.

To help with this, we should add a field (initial_client_timestamp?) to the certificate reports to record the local system time when the interstitial is first constructed.
 
Labels: Interstitials
Components: Internals>CertAnalysis
Components: -Security>UX

Comment 4 by est...@chromium.org, Nov 23 2016

Status: Started (was: Assigned)
Project Member

Comment 5 by bugdroid1@chromium.org, Nov 24 2016

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/6255265704c19083d47fb1500ee869f872dd546d

commit 6255265704c19083d47fb1500ee869f872dd546d
Author: estark <estark@chromium.org>
Date: Thu Nov 24 15:44:39 2016

Record the time when the interstitial is constructed

In Safe Browsing Extended Reporting reports, send the timestamp at which
the interstitial was constructed, in addition to the timestamp of the
report being sent. This will be helpful in cases where the user fixes
the clock while the interstitial is showing (so that we can see the
client clock time that actually triggered the date error).

BUG= 632218 

Review-Url: https://codereview.chromium.org/2524903004
Cr-Commit-Position: refs/heads/master@{#434331}

[modify] https://crrev.com/6255265704c19083d47fb1500ee869f872dd546d/chrome/browser/ssl/bad_clock_blocking_page.cc
[modify] https://crrev.com/6255265704c19083d47fb1500ee869f872dd546d/chrome/browser/ssl/bad_clock_blocking_page.h
[modify] https://crrev.com/6255265704c19083d47fb1500ee869f872dd546d/chrome/browser/ssl/captive_portal_blocking_page.cc
[modify] https://crrev.com/6255265704c19083d47fb1500ee869f872dd546d/chrome/browser/ssl/cert_report_helper.cc
[modify] https://crrev.com/6255265704c19083d47fb1500ee869f872dd546d/chrome/browser/ssl/cert_report_helper.h
[modify] https://crrev.com/6255265704c19083d47fb1500ee869f872dd546d/chrome/browser/ssl/ssl_blocking_page.cc
[modify] https://crrev.com/6255265704c19083d47fb1500ee869f872dd546d/components/certificate_reporting/cert_logger.proto
[modify] https://crrev.com/6255265704c19083d47fb1500ee869f872dd546d/components/certificate_reporting/error_report.cc
[modify] https://crrev.com/6255265704c19083d47fb1500ee869f872dd546d/components/certificate_reporting/error_report.h
[modify] https://crrev.com/6255265704c19083d47fb1500ee869f872dd546d/components/certificate_reporting/error_report_unittest.cc

Components: UI>Browser>Interstitials
Labels: -Interstitials

Comment 7 by est...@chromium.org, Dec 13 2016

Status: Fixed (was: Started)

Comment 8 by est...@chromium.org, Dec 15 2016

Labels: Merge-Request-56
Requesting a merge for the commit in comment 5

Comment 9 by dimu@chromium.org, Dec 15 2016

Labels: -Merge-Request-56 Merge-Approved-56 Hotlist-Merge-Approved
Your change meets the bar and is auto-approved for M56 (branch: 2924)
Project Member

Comment 10 by bugdroid1@chromium.org, Dec 15 2016

Labels: -merge-approved-56 merge-merged-2924
The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/9acee6d2c7c5e3deaa441f2a29e08a660e2860bc

commit 9acee6d2c7c5e3deaa441f2a29e08a660e2860bc
Author: Emily Stark <estark@google.com>
Date: Thu Dec 15 01:46:29 2016

Record the time when the interstitial is constructed

In Safe Browsing Extended Reporting reports, send the timestamp at which
the interstitial was constructed, in addition to the timestamp of the
report being sent. This will be helpful in cases where the user fixes
the clock while the interstitial is showing (so that we can see the
client clock time that actually triggered the date error).

BUG= 632218 

Review-Url: https://codereview.chromium.org/2524903004
Cr-Commit-Position: refs/heads/master@{#434331}
(cherry picked from commit 6255265704c19083d47fb1500ee869f872dd546d)

Review-Url: https://codereview.chromium.org/2575233003 .
Cr-Commit-Position: refs/branch-heads/2924@{#504}
Cr-Branched-From: 3a87aecc31cd1ffe751dd72c04e5a96a1fc8108a-refs/heads/master@{#433059}

[modify] https://crrev.com/9acee6d2c7c5e3deaa441f2a29e08a660e2860bc/chrome/browser/ssl/bad_clock_blocking_page.cc
[modify] https://crrev.com/9acee6d2c7c5e3deaa441f2a29e08a660e2860bc/chrome/browser/ssl/bad_clock_blocking_page.h
[modify] https://crrev.com/9acee6d2c7c5e3deaa441f2a29e08a660e2860bc/chrome/browser/ssl/captive_portal_blocking_page.cc
[modify] https://crrev.com/9acee6d2c7c5e3deaa441f2a29e08a660e2860bc/chrome/browser/ssl/cert_report_helper.cc
[modify] https://crrev.com/9acee6d2c7c5e3deaa441f2a29e08a660e2860bc/chrome/browser/ssl/cert_report_helper.h
[modify] https://crrev.com/9acee6d2c7c5e3deaa441f2a29e08a660e2860bc/chrome/browser/ssl/ssl_blocking_page.cc
[modify] https://crrev.com/9acee6d2c7c5e3deaa441f2a29e08a660e2860bc/components/certificate_reporting/cert_logger.proto
[modify] https://crrev.com/9acee6d2c7c5e3deaa441f2a29e08a660e2860bc/components/certificate_reporting/error_report.cc
[modify] https://crrev.com/9acee6d2c7c5e3deaa441f2a29e08a660e2860bc/components/certificate_reporting/error_report.h
[modify] https://crrev.com/9acee6d2c7c5e3deaa441f2a29e08a660e2860bc/components/certificate_reporting/error_report_unittest.cc

Sign in to add a comment