Bug#895147: firefox: Safe Browsing updates fail due to insufficient quota on the Google API key

[Mike Hommey]

On Sat, Apr 07, 2018 at 11:26:13AM -0700, Francois Marier wrote:
> Package: firefox
> Version: 59.0.2-1
> Severity: important
> Tags: security
> 
> After enabling browser.safebrowsing.debug in about:config, I saw this on my
> terminal:
> 
>   listmanager: 17:45:17 GMT+0000 (UTC): download error for goog-phish-proto,goog-malware-proto,goog-unwanted-proto,goog-badbinurl-proto,goog-downloadwhite-proto,goog-passwordwhite-proto: 429
> 
> "429 Too Many Requests" is given by the Safe Browsing server when API quota
> has been exceeded.
> 
> Note that I started Firefox in the morning (Pacific time) and the API quota
> is already gone. That means that for a good chunk of each day, Debian users
> are essentially running with Safe Browsing disabled.
> 
> Fixing this is simple:
> 
> 1. register for a new Google API key for Safe Browsing on https://developers.google.com/
> 2. email me (francois at mozilla.com) the Project ID (not the API key)
> 
> Google will be happy to increase the quota to a suitable amount.

We're using the same API key as the chromium in Debian, so presumably
the same problem applies to the chromium package. Why should we need a
*different* API key?

Mike