Keyboard shortcuts

Press or to navigate between chapters

Press S or / to search in the book

Press ? to show this help

Press Esc to hide this help

Necko Team – Weekly Status Meeting Notes

Date: 2026-02-24
Edition: February
Facilitator: Greg
Next on Triage: Sunil (backfilled by Randell)
Quality Report Coordinators (Feb): Randell Jesup, Ed Guloien


Round Table

SecPrivNecko Meetup – Toronto (May 5–9)

  • Discussed potential additional attendees from outside Necko:

  • Greg to coordinate invites and logistics.


LNA / Router Security Discussion 

  • Follow-up needed on email regarding local network security and router certificate work from community.

  • Topics include:

    • Internal network attacks (beyond WAN threats like Mirai).

    • Local router certificate bootstrapping (private PKI).

    • Project “Malaga” (PoC stage).

  • Greg to respond:

    • Thank for outreach.

    • Request project materials.

    • Suggest potential in-person discussion at IETF Vienna (June).

  • Context noted: HTTPS for local domains discussion relevant.


Team Check-ins

Hack Day Updates

  • Team reminded to document Hack Day progress.

  • Focus areas included failing assertion bugs and priority queue clean-up.


Fenix & DoH Performance

Bug 2009372 – Fenix DoH performance improvement landed 🎉

  • Nightly experiment planned to measure real-world impact.

  • Early telemetry analysis:

    • TRR vs native comparison by cohort and country.

    • DNS lookup timing comparisons.

    • Pageload event percentile analysis.

    • HTTP protocol version distribution.

Applink performance

  • Fenix Applink now ~12% faster YTD.

  • HTTP version for cached top-level documents no longer recorded (fix improves metric clarity).

  • Applink tests moving to HTTP/2 (previously HTTP/1.0), expected to shift numbers positively.


Happy Eyeballs

  • Rust-side implementation progressing.

  • IPv4/IPv6 family preference support under review.

  • ABI page review pending before first landing.

  • FFI review requested (Dana).

  • Additional work:

    • Storing IP family info in connection tree.

    • Addressing review comments.

    • Coordination between Rust and C++ sides ongoing.


QUIC / Hystart++

  • Slow start rearchitecture and Hystart++ in review.

  • Core design approval pending before metrics/search expansion.


Local Network Access (LNA)

  • 100% rollout to ETP Strict in 147 via Nimbus.

  • 148 release: enabled by default for ETP Strict.

  • Android Nightly enablement pending.

  • Permission API support r+.

  • Permission delegation handling updated.

  • Increasing temporary permission from 1h → 24h (under review).

  • New WebCompat issue: eager prompts when DNS hiccups cause local-router IP detection.

  • DNS Predictor meta bug closed.


Important Business

Priority Queue

(Security-sensitive bugs excluded)

Bug ID

Severity

Summary

Priority

Owner

Status

1869403

S3

Slow page load with “use system proxy” enabled

P1

kershaw

Will land this week

2000423

S3

FormData parser non-compliant (preamble)

P2

1974877

S3

WPT failures in /cookies/samesite

P2

1965087

S3

Cookie initialization on session restore

P2

edgul

1962316

S3

Android VPN + network bearer change incomplete requests

P2

1732512

S3

Fetch blocked by form submit

P2

smayya

1962817

S3

kameleoon.js deprioritization slows render

P2

acreskey

Experiment live

1963079

N/A

Exclude spurious document loads from telemetry

P2

2005275

S3

NS_IsMainThread assert (notion.so debug)

P2

2013783

S3

Website keeps reloading itself

P2

valentin.gosu

2014160

S3

Cache2 I/O thread 100% CPU

P2

jesup

2015482

N/A

BigQuery alerting

P2

2017712

S3

LNA prompts more eager than Chrome

P2

valentin.gosu

1896460

S3

Improve Blink sniffing compat

P3

kershaw

WIP

Queue status: 23 items (12 assigned).
Reminder: pick up oldest unassigned items when looking for next work.


Closed Fixed (Last Week – Non-Security)

  • 1944288 – Android WebSocket background behavior

  • 2009372 – Fenix DoH perf (bis)

  • 2012485 – SSLTokensCache improvements

  • 2012548 – MOZ_CRASH(ElementAt)

  • 2013879 – urlpattern crash

  • 2014416 – H3 early data hang


Active Projects

FEISTY

  • AMO & Remote Settings complete.

  • Downloads GCP migration nearing final blocker resolution.


DoH Enablement

  • Fenix experiment live in Nightly.

  • Telemetry and percentile analysis ongoing.

  • Continuing work to validate socket-thread bottleneck hypothesis.


Compression Dictionary Transport

  • Landing Nightly-only.

  • Telemetry monitoring before Beta.

  • Additional asserts and ETLD+1 telemetry planned.


QUIC / Hystart++

  • Core rearchitecture under review.

  • Performance validation in progress.


Happy Eyeballs

  • IPv4/IPv6 preference patch in review.

  • Rust/C++ integration progressing.

  • ABI review pending before first landing.


MASQUE

  • Remains paused, will resume after Happy Eyeballs.

Performance Highlights

  • Fenix Applink: ~12% faster YTD.

  • HTTP protocol version metrics refined.

  • Cached top-level document HTTP version no longer misreported.

  • Ongoing socket-thread CPU stress reduction efforts.


Maintenance Effectiveness (with Sec bugs):

  • Last week: 103.12%

  • Last month: 105.41%

  • Last 3 months: 113.18%


WebCompat

  • 11 needs-diagnosis bugs.

  • New top bug:

  • Reminder:

    • Hide PII-containing logs.

    • Create new component bugs instead of moving original WebCompat tickets.


Decisions & Alignment

  • Randell to backfill triage during Sunil’s leave.

  • Continue Nightly-only rollout strategy for Compression Dictionaries.

  • Proceed with LNA enablement for 148 ETP Strict.

  • Focus on landing first Happy Eyeballs version after ABI review.

  • Encourage priority queue oldest-item pickup.


Action Items

  • Randell – Backfill triage duties.

  • Greg

    • Respond to router certificate email.

    • Coordinate Toronto invite list.

    • Find facilitator for March 9–17.

    • Check HTML publication issue with Valentin.

  • Kershaw

    • Complete ABI page review.

    • Continue Happy Eyeballs connection tree work.

    • Continue system proxy perf improvements.

  • Max

    • Continue Happy Eyeballs Rust/C++ reviews.

    • Request Dana review FFI.

    • Address Rust-side comments.

  • Oskar

    • Address Hystart++ review comments.

    • Continue metrics/search work.

  • All

    • Document Hack Day work.

    • Review WebCompat queue.

    • Keep NI count <3.

Pick up oldest PQ items.