From 22af8714e137740a5df5f6f51de32ed3bcf46913 Mon Sep 17 00:00:00 2001
From: Will Bamberg <wbamberg@mozilla.com>
Date: Fri, 13 Jul 2018 12:08:00 -0700
Subject: [PATCH] Don't collect root certs if isUntrusted===true

---
 root-cert-stats/background.js | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/root-cert-stats/background.js b/root-cert-stats/background.js
index 570deed..59c70f3 100644
--- a/root-cert-stats/background.js
+++ b/root-cert-stats/background.js
@@ -14,7 +14,8 @@ async function logRootCert(details) {
       details.requestId,
       {"certificateChain": true}
     );
-    if (securityInfo.state == "secure" || securityInfo.state == "weak") {
+    if ((securityInfo.state == "secure" || securityInfo.state == "weak") &&
+        !securityInfo.isUntrusted) {
       let rootName = securityInfo.certificates[securityInfo.certificates.length - 1].subject;
       if (rootCertStats[rootName] === undefined) {
         rootCertStats[rootName] = 1;