canmove, Confirmed users
1,537
edits
SecurityEngineering/2013: Difference between revisions
no edit summary
No edit summary |
|||
| Line 8: | Line 8: | ||
* Implement/Evangelize: CSP 1.0 for Firefox platform ({{bug|663566}}) | * Implement/Evangelize: CSP 1.0 for Firefox platform ({{bug|663566}}) | ||
* Implement/Evangelize: Mixed Content Blocker ({{bug|815321}}) | * Implement/Evangelize: Mixed Content Blocker ({{bug|815321}}) | ||
* Implement: Application Reputation (anti-malware) ({{bug|662819}}) | |||
* Implement/Evangelize: Site security error reporting (web console) | |||
== Build Security and Privacy into Mobile == | == Build Security and Privacy into Mobile == | ||
* Consult: [[Apps/Security|B2G App Security Model]] | * Consult: [[Apps/Security|B2G App Security Model]] | ||
* Implement: CSP for apps on B2G ({{bug|773891}}) | * Implement: CSP for apps on B2G ({{bug|773891}}) | ||
* Implement: App signing for marketplace/B2G ({{bug|772365}}) | |||
== Improve User Control Over How Their Information is Shared and Used == | == Improve User Control Over How Their Information is Shared and Used == | ||
| Line 17: | Line 20: | ||
* Research: [http://www.mozilla.org/en-US/collusion/ Collusion project] improved transparency and generated buzz | * Research: [http://www.mozilla.org/en-US/collusion/ Collusion project] improved transparency and generated buzz | ||
* Research: [https://dnt-dashboard.mozilla.org DNT statistics] made available by the web | * Research: [https://dnt-dashboard.mozilla.org DNT statistics] made available by the web | ||
* Research: [[Security/Contextual_Identity_Project Contextual identity]] work. (Blushproof, paper) | |||
* Consult: Cookie Clearinghouse | |||
== Build Security into Web Communications == | == Build Security into Web Communications == | ||
* Research: Web Crypto | * Research: Web Crypto | ||
* Implement: Certificate Revocation upgrades | * Implement: Certificate Revocation upgrades | ||
* Implement: Rewrite certificate verification library ({{bug|878932}}) | |||
* Implement: Certificate key pinning ({{bug|744204}}) | |||
* Research/Evangelize/Implement: [https://wiki.mozilla.org/CA CA inclusion/maintenance policy v2.1] | |||
* Research/Implement: [https://addons.mozilla.org/en-US/firefox/addon/password-knight/ Password Knight] | |||
* Research/Implement: [Security/Features/SSL_Error_Reporting Certificate error reporting] | |||