mmoskvitin@google.com mastiz@chromium.org Records whether access token fetching attempt was successful upon every request to Security Domains service. mmoskvitin@google.com mastiz@chromium.org thomasth@google.com Records the results of DownloadAuthenticationFactorsRegistrationState calls. This function determines the recoverability state of a security domain. It is recorded whenever DownloadAuthenticationFactorsRegistrationState is called. For passkeys this happens during WebAuthn calls, in some cases without a Google Password Manager passkey being selected, only present. Security domain: {SecurityDomainId} mmoskvitin@google.com mastiz@chromium.org thomasth@google.com Records the result of an attempt to download trusted vault keys from the server for {SecurityDomainId}. "Downloading" here refers to fetching a private member key from {LocalRecoveryFactorType}, fetching wrapped member keys from the backend and validating / decrypting the keys. Note: This histogram covers all registration versions. mmoskvitin@google.com mastiz@chromium.org Recorded when reading local trusted vault file for {SecurityDomainId}. mmoskvitin@google.com mastiz@chromium.org Records whether writing local trusted vault file for {SecurityDomainId} was successful upon each write. mastiz@chromium.org martinkr@google.com Records the security domains passed as arguments to the Javascript API chrome.setClientEncryptionKeys() on the renderer side (one sample per security domain; multiple domains can be passed in one API call). Every unrecognized security domain name is recorded as "invalid". mastiz@chromium.org martinkr@google.com For each invocation of the Javascript API chrome.setClientEncryptionKeys(), records whether the passed arguments could be successfully parsed (one sample per invocation). nsatragno@chromium.org mastiz@chromium.org Records the status of a Google Password Manager PIN as reported by listSecurityDomainMembers calls. This is called whenever Chrome needs to consult the state of the user's security domain, like when refreshing a GPM PIN or running a GPM enclave passkey transaction. mmrashad@google.com mmoskvitin@google.com Records the status of the degraded recoverability upon the request completion. Note that this is the status on the server side, which could be error if the request was failed. mmoskvitin@google.com mastiz@chromium.org thomasth@google.com Records the outcome of an attempt to recover trusted vault keys for {SecurityDomainId} using all available local recovery factors. Note: If this fails, then user interaction is required to fetch keys. mmoskvitin@google.com mastiz@chromium.org thomasth@google.com Simplified version of TrustedVault.RecoveryFactorRegistrationState. Records whether, according to information on this device, a recovery factor is registered (and ignores whether re-registration was completed/pending/in-flight) upon startup (if signed in) or upon first signin. Recorded at most once for every recovery factor / security domain combination per profile within the browser process lifetime. Recovery factor: {LocalRecoveryFactorType} Security domain: {SecurityDomainId} mmoskvitin@google.com mastiz@chromium.org thomasth@google.com Records the outcome of a recovery factor registration attempt for a private key stored in/on {LocalRecoveryFactorType} upon request completion or failure. Security domain: {SecurityDomainId} mmoskvitin@google.com mastiz@chromium.org thomasth@google.com Records whether, according to information on this device, a recovery factor is registered on the server upon startup (if signed in) or upon first signin, and if not registered, provides insights into why. Recorded at most once for every recovery factor / security domain combination per browser process lifetime. Recovery factor: {LocalRecoveryFactorType} Security domain: {SecurityDomainId} ammarmk@google.com thomasth@google.com markusheintz@google.com ylahodiuk@google.com Recorded when the GPM keychain recovery flow is triggered in the browser. Tracks which endpoint (Desktop or Desktop Embedded) is being targeted. nsatragno@chromium.org mastiz@chromium.org mmoskvitin@google.com Recorded as a result of fetching the recovery key store certificates (i.e. cert.xml and cert.sig.xml files). mastiz@chromium.org mmoskvitin@chromium.org martinkr@google.com Counts of responses (both http code and net error code) for requests to the recovery key store server (aka Vault Service). Note that requests that timed out are not covered by this histogram. {Reason} mastiz@chromium.org mmoskvitin@chromium.org martinkr@google.com Counts of responses (both http code and net error code) for requests to the Trusted Vault server (aka Security Domain Service), broken out by {Reason} and {SecurityDomainId}. Note that requests that timed out are not covered by this histogram. mastiz@chromium.org martinkr@google.com Records the security domains passed as arguments to the Javascript API chrome.setClientEncryptionKeys() (or chrome.setSyncEncryptionKeys()) on the browser side (one sample per passed domain; multiple domains can be passed in one API call). Every unrecognized security domain name is recorded as "invalid". {ProfileType} mmrashad@google.com mmoskvitin@google.com Records the known degraded recoverability value when the degraded recoverability handler is started. Note that the value reflects state restored from the file and recorded before sending new request to the server. mmrashad@google.com mmoskvitin@google.com Recorded when an immediate degraded recoverability request is going to be sent to the server. Records which heuristic triggered immediate request of the current degraded recoverability state from the server.