SecurityEngineering/MeetingNotes/03-01-12: Difference between revisions

From MozillaWiki
Jump to navigation Jump to search
No edit summary
 
(2 intermediate revisions by the same user not shown)
Line 1: Line 1:
<h1>3-1-12 - Security Engineering Meeting</h1>
03/01/2012
<b>Standing agenda:</b>
== Standing agenda ==
* Review currently active (P1) features against their established milestones, identify any blockers - https://wiki.mozilla.org/Security/Roadmap + https://wiki.mozilla.org/Privacy/Roadmap
* Review currently active (P1) features against their established milestones, identify any blockers - https://wiki.mozilla.org/Security/Roadmap + https://wiki.mozilla.org/Privacy/Roadmap
* Review roadmap priorities to ensure they accurately reflect active projects and Mozilla's priorities
* Review roadmap priorities to ensure they accurately reflect active projects and Mozilla's priorities
* Suggest additions or changes to roadmaps
* Suggest additions or changes to roadmaps
* Detailed discussion of features or outstanding issues as time permits
* Detailed discussion of features or outstanding issues as time permits
UI-UX https://wiki.mozilla.org/SecuritUI-UX
UI-UX https://wiki.mozilla.org/SecurityUI-UX
* Upcoming events, OOO/travel, etc.
* Upcoming events, OOO/travel, etc.
** Sid is in DC (for an IAPP privacy summit) Tuesday-Friday (6-9 March)
** Sid is in DC (for an IAPP privacy summit) Tuesday-Friday (6-9 March)
Line 11: Line 11:
** Lucas out Tues-Mon
** Lucas out Tues-Mon


<b>Additional Topics:</b>
== Additional Topics ==
* CA/B Forum - Certificate Authority & Browser Forum
* CA/B Forum - Certificate Authority & Browser Forum
Paypal presented a suggestion for replacing it for a real standards body.  
Paypal presented a suggestion for replacing it for a real standards body.  
Line 18: Line 18:
* RSA - the conference, not the cryptosystem
* RSA - the conference, not the cryptosystem
Panel - Revocation for SSL certificates
Panel - Revocation for SSL certificates
* Summer of Code
* Summer of Code.  <br/>Background: Google gives a stipend per student and $500 for organization for the overhead.  Selection of organizations is starting very soon.  And then you select the projects.  Vetted by Googles.  March 9th deadline.  <br/>Ideas:
Background: Google gives a stipend per student and $500 for organization for the overhead.  Selection of organizations is starting very soon.  And then you select the projects.  Vetted by Googles.  March 9th deadline
Ideas:
** Tor support features
** Tor support features
** CSP the web - User supplied CSP.
** CSP the web - User supplied CSP.
Line 27: Line 25:
* Chrome Default CSP Policy for Extensions
* Chrome Default CSP Policy for Extensions
** http://blog.chromium.org/2012/02/more-secure-extensions-by-default.html
** http://blog.chromium.org/2012/02/more-secure-extensions-by-default.html
<b>Public meetings</b>
 
== Public meetings ==
* with published public notes
* with published public notes
* x342
* x342
* starting 3/15/2012
* starting 3/15/2012

Latest revision as of 22:04, 15 March 2012

03/01/2012

Standing agenda

UI-UX https://wiki.mozilla.org/SecurityUI-UX

  • Upcoming events, OOO/travel, etc.
    • Sid is in DC (for an IAPP privacy summit) Tuesday-Friday (6-9 March)
    • Tanvi Cansecwest (Tuesday - Saturday, March 6-10)
    • Lucas out Tues-Mon

Additional Topics

  • CA/B Forum - Certificate Authority & Browser Forum

Paypal presented a suggestion for replacing it for a real standards body. After hearing Paypals proposal, going to form a working group to reform the forum. And propose changes, adopt them, etc and hopefully get public involvement. http://cabforum.org/org_announcement.html

  • RSA - the conference, not the cryptosystem

Panel - Revocation for SSL certificates

  • Summer of Code.
    Background: Google gives a stipend per student and $500 for organization for the overhead. Selection of organizations is starting very soon. And then you select the projects. Vetted by Googles. March 9th deadline.
    Ideas:
    • Tor support features
    • CSP the web - User supplied CSP.

Timeline:http://www.google-melange.com/document/show/gsoc_program/google/gsoc2012/faqs#timeline Contacts : gerv or chofmann

Public meetings

  • with published public notes
  • x342
  • starting 3/15/2012
Retrieved from "https://wiki.allizom.org/index.php?title=SecurityEngineering/MeetingNotes/03-01-12&oldid=408309"