On Sat, Apr 07, 2018 at 11:26:13AM -0700, Francois Marier wrote: > Package: firefox > Version: 59.0.2-1 > Severity: important > Tags: security > > After enabling browser.safebrowsing.debug in about:config, I saw this on my > terminal: > > listmanager: 17:45:17 GMT+0000 (UTC): download error for > goog-phish-proto,goog-malware-proto,goog-unwanted-proto,goog-badbinurl-proto,goog-downloadwhite-proto,goog-passwordwhite-proto: > 429 > > "429 Too Many Requests" is given by the Safe Browsing server when API quota > has been exceeded. > > Note that I started Firefox in the morning (Pacific time) and the API quota > is already gone. That means that for a good chunk of each day, Debian users > are essentially running with Safe Browsing disabled. > > Fixing this is simple: > > 1. register for a new Google API key for Safe Browsing on > https://developers.google.com/ > 2. email me (franc...@mozilla.com) the Project ID (not the API key) > > Google will be happy to increase the quota to a suitable amount.
We're using the same API key as the chromium in Debian, so presumably the same problem applies to the chromium package. Why should we need a *different* API key? Mike