Review closed mozilla91 bug

@richard: can you start at bug 1713522 on the list in the description?

Happy to report that none of the bugs under 1713522 appear to need our attention.

From my notes when I reviewed the other bugs:

resistFingerprinting: Bump spoofed Android OS version to 10
- "resistFingerprinting on Android should spoof OS version 10 because Android 10 is the most common Android version in the market"
Clean up partitionKey parsing and matching code-
- Seems safe
Remove pref that decides if OriginAttributes should be used in a remote type
- Pref was browser.tabs.remote.useOriginAttributesInRemoteType. Now the OA is used unconditionally in remote fission windows.
Also use this proxy for FTP and HTTPS
- Only adjusting a Preferences string
[meta] Support managing site data by first-party site when dFPI is active
- Meta-bug, but noting in anyway.
Enable the Visual Viewport API on desktop
- Needs further fingerprinting investigation
- As noted in the bug, fingerprinting risk on Android: visualViewport leaks the onscreen keyboard height
Enable HTTPS-First Mode in PBM Mode
- Pref dom.security.https_first_pbm
- HTTPS Everywhere takes precedence in Tor Browser, but we'll want to prefer HTTPS Only Mode instead of HTTPS First Mode, in the future.
Implement Windows 10 SSO on Firefox
- Pref network.http.windows10-sso.enabled
- Already disabled in #40463 (closed)
- Related #40717 (closed)
HTTPS-First and HTTPS-Only: Convert static 3000ms background request delay to rely on a pref
- Pref is dom.security.https_only_fire_http_request_background_timer_ms
- Not important for us right now, but may be in the future

@gk The only change we may want to make is disabling the Visual ViewPort on desktop (from Enable the Visual Viewport API on desktop).

Not sure. I guess letterboxing might save our day? We should investigate that over in #30542 (closed).

assigned to @gk

added Doing label

We are done here. The remaining work, if needed can be done in #30542 (closed), closing.

closed

Designs