MozillaWiki

SecurityEngineering: Difference between revisions

Page Discussion

SecurityEngineering (view source)

Revision as of 23:45, 18 April 2017

954 bytes removed ,  18 April 2017
Remove duplicate list of projects
(Remove duplicate list of projects)
Line 8: Line 8:
==Who is involved==
==Who is involved==
Security Engineering is led by Wennie Leung. Work is divided between these main teams:
Security Engineering is led by Wennie Leung. Work is divided between these main teams:
* Privacy and Security Engineering: website & browser security features, DOM security (CSP, SRI, Cookies, origin etc), Content Blocking (safe browsing, download protection) and sandboxing.
* Privacy and Security Engineering: website & browser security features ([[Security/Contextual_Identity_Project/Containers|Containers]], [[CloudServices/Password_Manager|Password Manager]], etc.), DOM security ([[Security/CSP|CSP]], [[Security/Subresource_Integrity|SRI]], Cookies, [[Security/Features/Mixed_Content_Blocker|Mixed Content Blocking]], origin, etc), Content Blocking ([[Security/Safe Browsing|Safe Browsing]], [[Security/Application_Reputation|Download Protection]] and [[Security/Tracking_protection|Tracking Protection]]), [[Security/Features/Revamp_Security_Hooks|revamp of security hooks]], [[Security/Tor_Uplift/Tracking|Tor Uplift]] and [[Security/Sandbox/Hardening|Sandbox Hardening]].
* [[Security/CryptoEngineering|Communications security]] (Lead:[https://mozillians.org/en-US/u/jcjones/ JC Jones]): TLS stack, communications security, WebCrypto, [[PSM:Topics|PSM]], [[NSS]]
* [[Security/CryptoEngineering|Communications security]] (Lead:[https://mozillians.org/en-US/u/jcjones/ JC Jones]): TLS stack, communications security, WebCrypto, [[PSM:Topics|PSM]], [[NSS]], [[SecurityEngineering/TLS_Error_Reports|Error Reporting]] and OneCRL
* Defensive Security Engineering (Lead: Tom Ritter): implementing changes to Firefox that improve our security posture.
* Defensive Security Engineering (Lead: Tom Ritter): implementing changes to Firefox that improve our security posture.
* [[CA:Overview|Mozilla's CA Certificate Program]] (Program Manager: [https://mozillians.org/en-US/u/kwilson/ Kathleen Wilson])
* [[CA:Overview|Mozilla's CA Certificate Program]] (Program Manager: [https://mozillians.org/en-US/u/kwilson/ Kathleen Wilson])
Line 36: Line 36:


For details of our projects in these four areas, see the [[Security/Roadmap|security roadmap]].
For details of our projects in these four areas, see the [[Security/Roadmap|security roadmap]].
==Current Efforts==
'''Content Security'''
{|class="wikitable"
! Topic
! Engineering Contact
! QA Contact
|-
| [[Security/Application_Reputation|Application Reputation]]
| [[User:Fmarier|Francois Marier]]
|
|-
|-
| [[Security/Contextual_Identity_Project/Containers|Containers]]
| Tanvi Vyas
| Kamil Jozwiak
|-
| [[Security/CSP|Content Security Policy]]
| Christoph Kerschbaumer
|
|-
| Meta Referrer
|
|
|-
| [[Security/Features/Mixed_Content_Blocker|Mixed Content Blocking]]
| Tanvi Vyas
|
|-
| [[CloudServices/Password_Manager|Password Manager]]
| Tanvi Vyas
| Kamil Jozwiak / SoftVision
|-
| [[Security/Features/Revamp_Security_Hooks|Revamp of Security Hooks]]
| Christoph Kerschbaumer
|
|-
| [[Security/Safe Browsing|Safe Browsing]]
| [[User:Fmarier|Francois Marier]] / Ethan Tseng
| Cynthia Tang
|-
| [[Security/Subresource_Integrity|Sub-resource Integrity]]
| [[User:Fmarier|Francois Marier]]
|
|-
| [[Security/Tor_Uplift/Tracking|Tor Uplift]]
| Ethan Tseng / Tom Ritter
| Cynthia Tang / Kamil Jozwiak
|-
| [[Security/Tracking_protection|Tracking Protection]]
| [[User:Fmarier|Francois Marier]]
|
|-
| [[Security/Sandbox/Hardening|Sandbox Hardening]]
| [[User:Ptheriault|Paul Theriault]]
|
|}
'''Communications Security'''
{|class="wikitable"
! Topic
! Engineering Contact
! QA Contact
|-
| Add-on signing
| Daniel Veditz
|
|-
| [[CA:Overview|CA Program]]
| Kathleen Wilson
|
|-
| [[Security/TLS_Error_Reporting|Error Reporting]]
| Mark Goodwin
| Matt Wobensmith
|-
| [[Security/OneCRL|OneCRL]]
| Mark Goodwin
| Matt Wobensmith
|}


==How to participate==
==How to participate==
Fmarier
Confirmed users
908

edits

Retrieved from "https://wiki.allizom.org/Special:MobileDiff/1168641"