Confirmed users
238
edits
SecurityEngineering/Public Key Pinning/ReleaseEngineering: Difference between revisions
SecurityEngineering/Public Key Pinning/ReleaseEngineering (view source)
Revision as of 23:44, 22 May 2014
, 22 May 2014→What critical Mozilla properties are we planning to pin?
| Line 7: | Line 7: | ||
== What critical Mozilla properties are we planning to pin? == | == What critical Mozilla properties are we planning to pin? == | ||
* AMO | * AMO | ||
* aus4 is under question. We have a meeting with rstrong to discuss what, if any, benefits pinning provides over verifying the signature on the actual binaries and requiring those come from a known issuer. The drawback of pinning the updater is that we may break ourselves. | |||
== How to rollback pinning for Firefox == | == How to rollback pinning for Firefox == | ||