To close this thread: almost all of the errors appeared to be on api.accounts.firefox.com, most likely from startup background traffic. After discussing with ckarlof and keeler, we went ahead and enabled pinning on all of *.accounts.firefox.com, including api.accounts.firefox.com. Please let us know if you see any difficulty.
Thanks, Monica ----- Original Message ----- > > We could also add an additional domain distinction in the reporting, i.e., > > report pinning violations separately for: > > > > accounts.firefox.com (serves the front end UI) > > api.accounts.firefox.com (provides the authentication API) > > https://bugzilla.mozilla.org/show_bug.cgi?id=1033872 _______________________________________________ Dev-fxacct mailing list [email protected] https://mail.mozilla.org/listinfo/dev-fxacct
