<div dir="ltr"><div>IIRC, Sync itself still has upgrade-required messaging — if we send a 200/404/513 with soft-eol or hard-eol, the device should tell the user that they need to upgrade to continue syncing.</div><div><br></div><div>It might be worth flipping that to soft-eol for the pre-45 population — which we can identify via UA — and see if they upgrade to shift that 98.13% up a little bit.<br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Sep 14, 2017 at 3:37 PM, Alex Davis <span dir="ltr"><<a href="mailto:adavis@mozilla.com" target="_blank">adavis@mozilla.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div>Based on Leif's query, if we supported back to 45, we'd cover 98.13% of the users active in the last 7 days.</div><div><a href="https://sql.telemetry.mozilla.org/queries/36264#97308" target="_blank">https://sql.telemetry.mozilla.<wbr>org/queries/36264#97308</a></div><div><br></div><div>If we were more aggressive and did 52, we'd cover 87.7% of users... which seems <b>too</b> aggressive but perhaps we can see if we can try to nudge people to upgrade first.<br></div><div><br></div><div><br></div></div><div class="gmail_extra"><span class=""><br clear="all"><div><div class="m_-7998531349408726014gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div></div><div>--<br>Alex Davis <span>// Mountain View</span></div><div>Product Manager // FxA & Sync<br></div><a href="tel:(415)%20769-9247" value="+14157699247" target="_blank">(415) 769-9247</a></div><span></span></div><div>IRC & Slack: adavis<br></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div>
<br></span><div><div class="h5"><div class="gmail_quote">On Thu, Sep 14, 2017 at 2:43 PM, Ryan Kelly <span dir="ltr"><<a href="mailto:rfkelly@mozilla.com" target="_blank">rfkelly@mozilla.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div class="gmail_extra"><div class="gmail_quote"><span>On 15 September 2017 at 05:46, Mark Hammond <span dir="ltr"><<a href="mailto:mhammond@mozilla.com" target="_blank">mhammond@mozilla.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Another way to look at this is: at some point, Mozilla makes a decision<br>
that even the most serious security vulnerability which can cause<br>
significant harm to users will not be fixed in some older versions. I<br>
find it difficult to justify that the FxA team should be held to a<br>
higher standard - and in some cases, it's even possible that having FxA<br>
work on such older, vulnerable Firefoxes could potentially cause *more*<br>
harm to the user.<br></blockquote><div><br></div></span><div>I strongly support this as a lower-bound on our ambitions here. Mark, is there a concrete policy based around ESR etc for these decisions?</div><span class="m_-7998531349408726014HOEnZb"><font color="#888888"><div><br></div><div><br></div><div> Ryan<br></div></font></span></div></div></div>
</blockquote></div><br></div></div></div>
<br>______________________________<wbr>_________________<br>
Dev-fxacct mailing list<br>
<a href="mailto:Dev-fxacct@mozilla.org">Dev-fxacct@mozilla.org</a><br>
<a href="https://mail.mozilla.org/listinfo/dev-fxacct" rel="noreferrer" target="_blank">https://mail.mozilla.org/<wbr>listinfo/dev-fxacct</a><br>
<br></blockquote></div><br></div>