Necko Team – Weekly Status Meeting Notes
Date: 2026-02-24
Edition: February
Facilitator: Greg
Next on Triage: Sunil (backfilled by Randell)
Quality Report Coordinators (Feb): Randell Jesup, Ed Guloien
Round Table
SecPrivNecko Meetup – Toronto (May 5–9)
-
Discussed potential additional attendees from outside Necko:
-
Greg to coordinate invites and logistics.
LNA / Router Security Discussion
-
Follow-up needed on email regarding local network security and router certificate work from community.
-
Topics include:
-
Internal network attacks (beyond WAN threats like Mirai).
-
Local router certificate bootstrapping (private PKI).
-
Project “Malaga” (PoC stage).
-
-
Greg to respond:
-
Thank for outreach.
-
Request project materials.
-
Suggest potential in-person discussion at IETF Vienna (June).
-
-
Context noted: HTTPS for local domains discussion relevant.
Team Check-ins
Hack Day Updates
-
Team reminded to document Hack Day progress.
-
Focus areas included failing assertion bugs and priority queue clean-up.
Fenix & DoH Performance
Bug 2009372 – Fenix DoH performance improvement landed 🎉
-
Nightly experiment planned to measure real-world impact.
-
Early telemetry analysis:
-
TRR vs native comparison by cohort and country.
-
DNS lookup timing comparisons.
-
Pageload event percentile analysis.
-
HTTP protocol version distribution.
-
Applink performance
-
Fenix Applink now ~12% faster YTD.
-
HTTP version for cached top-level documents no longer recorded (fix improves metric clarity).
-
Applink tests moving to HTTP/2 (previously HTTP/1.0), expected to shift numbers positively.
Happy Eyeballs
-
Rust-side implementation progressing.
-
IPv4/IPv6 family preference support under review.
-
ABI page review pending before first landing.
-
FFI review requested (Dana).
-
Additional work:
-
Storing IP family info in connection tree.
-
Addressing review comments.
-
Coordination between Rust and C++ sides ongoing.
-
QUIC / Hystart++
-
Slow start rearchitecture and Hystart++ in review.
-
Core design approval pending before metrics/search expansion.
Local Network Access (LNA)
-
100% rollout to ETP Strict in 147 via Nimbus.
-
148 release: enabled by default for ETP Strict.
-
Android Nightly enablement pending.
-
Permission API support r+.
-
Permission delegation handling updated.
-
Increasing temporary permission from 1h → 24h (under review).
-
New WebCompat issue: eager prompts when DNS hiccups cause local-router IP detection.
-
DNS Predictor meta bug closed.
Important Business
Priority Queue
(Security-sensitive bugs excluded)
Bug ID
Severity
Summary
Priority
Owner
Status
S3
Slow page load with “use system proxy” enabled
P1
kershaw
Will land this week
S3
FormData parser non-compliant (preamble)
P2
—
—
S3
WPT failures in /cookies/samesite
P2
—
—
S3
Cookie initialization on session restore
P2
edgul
—
S3
Android VPN + network bearer change incomplete requests
P2
—
—
S3
Fetch blocked by form submit
P2
smayya
—
S3
kameleoon.js deprioritization slows render
P2
acreskey
Experiment live
N/A
Exclude spurious document loads from telemetry
P2
—
—
S3
NS_IsMainThread assert (notion.so debug)
P2
—
—
S3
Website keeps reloading itself
P2
valentin.gosu
—
S3
Cache2 I/O thread 100% CPU
P2
jesup
—
N/A
BigQuery alerting
P2
—
—
S3
LNA prompts more eager than Chrome
P2
valentin.gosu
—
S3
Improve Blink sniffing compat
P3
kershaw
WIP
Queue status: 23 items (12 assigned).
Reminder: pick up oldest unassigned items when looking for next work.
Closed Fixed (Last Week – Non-Security)
-
1944288 – Android WebSocket background behavior
-
2009372 – Fenix DoH perf (bis)
-
2012485 – SSLTokensCache improvements
-
2012548 – MOZ_CRASH(ElementAt)
-
2013879 – urlpattern crash
-
2014416 – H3 early data hang
Active Projects
FEISTY
-
AMO & Remote Settings complete.
-
Downloads GCP migration nearing final blocker resolution.
DoH Enablement
-
Fenix experiment live in Nightly.
-
Telemetry and percentile analysis ongoing.
-
Continuing work to validate socket-thread bottleneck hypothesis.
Compression Dictionary Transport
-
Landing Nightly-only.
-
Telemetry monitoring before Beta.
-
Additional asserts and ETLD+1 telemetry planned.
QUIC / Hystart++
-
Core rearchitecture under review.
-
Performance validation in progress.
Happy Eyeballs
-
IPv4/IPv6 preference patch in review.
-
Rust/C++ integration progressing.
-
ABI review pending before first landing.
MASQUE
- Remains paused, will resume after Happy Eyeballs.
Performance Highlights
-
Fenix Applink: ~12% faster YTD.
-
HTTP protocol version metrics refined.
-
Cached top-level document HTTP version no longer misreported.
-
Ongoing socket-thread CPU stress reduction efforts.
Maintenance Effectiveness (with Sec bugs):
-
Last week: 103.12%
-
Last month: 105.41%
-
Last 3 months: 113.18%
WebCompat
-
11 needs-diagnosis bugs.
-
New top bug:
- 2017305 (possible regressor).
-
Reminder:
-
Hide PII-containing logs.
-
Create new component bugs instead of moving original WebCompat tickets.
-
Decisions & Alignment
-
Randell to backfill triage during Sunil’s leave.
-
Continue Nightly-only rollout strategy for Compression Dictionaries.
-
Proceed with LNA enablement for 148 ETP Strict.
-
Focus on landing first Happy Eyeballs version after ABI review.
-
Encourage priority queue oldest-item pickup.
Action Items
-
Randell – Backfill triage duties.
-
Greg
-
Respond to router certificate email.
-
Coordinate Toronto invite list.
-
Find facilitator for March 9–17.
-
Check HTML publication issue with Valentin.
-
-
Kershaw
-
Complete ABI page review.
-
Continue Happy Eyeballs connection tree work.
-
Continue system proxy perf improvements.
-
-
Max
-
Continue Happy Eyeballs Rust/C++ reviews.
-
Request Dana review FFI.
-
Address Rust-side comments.
-
-
Oskar
-
Address Hystart++ review comments.
-
Continue metrics/search work.
-
-
All
-
Document Hack Day work.
-
Review WebCompat queue.
-
Keep NI count <3.
-
Pick up oldest PQ items.