Necko Team – Weekly Status Meeting Notes

Date: 2026-02-24
Edition: February
Facilitator: Greg
Next on Triage: Sunil (backfilled by Randell)
Quality Report Coordinators (Feb): Randell Jesup, Ed Guloien

Round Table

SecPrivNecko Meetup – Toronto (May 5–9)

• Discussed potential additional attendees from outside Necko:

• Greg to coordinate invites and logistics.

LNA / Router Security Discussion 

• Follow-up needed on email regarding local network security and router certificate work from community.

• Topics include:

  • Internal network attacks (beyond WAN threats like Mirai).

  • Local router certificate bootstrapping (private PKI).

  • Project “Malaga” (PoC stage).

• Greg to respond:

  • Thank for outreach.

  • Request project materials.

  • Suggest potential in-person discussion at IETF Vienna (June).

• Context noted: HTTPS for local domains discussion relevant.

Team Check-ins

Hack Day Updates

• Team reminded to document Hack Day progress.

• Focus areas included failing assertion bugs and priority queue clean-up.

Fenix & DoH Performance

Bug 2009372 – Fenix DoH performance improvement landed 🎉

• Nightly experiment planned to measure real-world impact.

• Early telemetry analysis:

  • TRR vs native comparison by cohort and country.

  • DNS lookup timing comparisons.

  • Pageload event percentile analysis.

  • HTTP protocol version distribution.

Applink performance

• Fenix Applink now ~12% faster YTD.

• HTTP version for cached top-level documents no longer recorded (fix improves metric clarity).

• Applink tests moving to HTTP/2 (previously HTTP/1.0), expected to shift numbers positively.

Happy Eyeballs

• Rust-side implementation progressing.

• IPv4/IPv6 family preference support under review.

• ABI page review pending before first landing.

• FFI review requested (Dana).

• Additional work:

  • Storing IP family info in connection tree.

  • Addressing review comments.

  • Coordination between Rust and C++ sides ongoing.

QUIC / Hystart++

• Slow start rearchitecture and Hystart++ in review.

• Core design approval pending before metrics/search expansion.

Local Network Access (LNA)

• 100% rollout to ETP Strict in 147 via Nimbus.

• 148 release: enabled by default for ETP Strict.

• Android Nightly enablement pending.

• Permission API support r+.

• Permission delegation handling updated.

• Increasing temporary permission from 1h → 24h (under review).

• New WebCompat issue: eager prompts when DNS hiccups cause local-router IP detection.

• DNS Predictor meta bug closed.

Important Business

Priority Queue

(Security-sensitive bugs excluded)

Queue status: 23 items (12 assigned).
Reminder: pick up oldest unassigned items when looking for next work.

Closed Fixed (Last Week – Non-Security)

• 1944288 – Android WebSocket background behavior

• 2009372 – Fenix DoH perf (bis)

• 2012485 – SSLTokensCache improvements

• 2012548 – MOZ_CRASH(ElementAt)

• 2013879 – urlpattern crash

• 2014416 – H3 early data hang

Active Projects

FEISTY

• AMO & Remote Settings complete.

• Downloads GCP migration nearing final blocker resolution.

DoH Enablement

• Fenix experiment live in Nightly.

• Telemetry and percentile analysis ongoing.

• Continuing work to validate socket-thread bottleneck hypothesis.

Compression Dictionary Transport

• Landing Nightly-only.

• Telemetry monitoring before Beta.

• Additional asserts and ETLD+1 telemetry planned.

QUIC / Hystart++

• Core rearchitecture under review.

• Performance validation in progress.

Happy Eyeballs

• IPv4/IPv6 preference patch in review.

• Rust/C++ integration progressing.

• ABI review pending before first landing.

MASQUE

• Remains paused, will resume after Happy Eyeballs.

Performance Highlights

• Fenix Applink: ~12% faster YTD.

• HTTP protocol version metrics refined.

• Cached top-level document HTTP version no longer misreported.

• Ongoing socket-thread CPU stress reduction efforts.

Maintenance Effectiveness (with Sec bugs):

• Last week: 103.12%

• Last month: 105.41%

• Last 3 months: 113.18%

WebCompat

• 11 needs-diagnosis bugs.

• New top bug:

  • 2017305 (possible regressor).

• Reminder:

  • Hide PII-containing logs.

  • Create new component bugs instead of moving original WebCompat tickets.

Decisions & Alignment

• Randell to backfill triage during Sunil’s leave.

• Continue Nightly-only rollout strategy for Compression Dictionaries.

• Proceed with LNA enablement for 148 ETP Strict.

• Focus on landing first Happy Eyeballs version after ABI review.

• Encourage priority queue oldest-item pickup.

Action Items

• Randell – Backfill triage duties.

• Greg

  • Respond to router certificate email.

  • Coordinate Toronto invite list.

  • Find facilitator for March 9–17.

  • Check HTML publication issue with Valentin.

• Kershaw

  • Complete ABI page review.

  • Continue Happy Eyeballs connection tree work.

  • Continue system proxy perf improvements.

• Max

  • Continue Happy Eyeballs Rust/C++ reviews.

  • Request Dana review FFI.

  • Address Rust-side comments.

• Oskar

  • Address Hystart++ review comments.

  • Continue metrics/search work.

• All

  • Document Hack Day work.

  • Review WebCompat queue.

  • Keep NI count <3.

Pick up oldest PQ items.