SecurityEngineering/MeetingNotes/04-18-13

Standing Agenda

• Q2 Goals Recap ( https://intranet.mozilla.org/2013Q2Goals#Security_Engineering )
• Review roadmap priorities to ensure they accurately reflect active projects and Mozilla's priorities
• Suggest additions or changes to roadmaps
• Detailed discussion of features or outstanding issues as time permits
• Additional Items
• Upcoming events, OOO/travel, etc.

Last week: https://wiki.mozilla.org/SecurityEngineering/MeetingNotes/04-11-13

Agenda

• Q2 Goals - recap
• NIST workshop summary
• Scheduling
• Web Console Security Errors progress update
• Stanford security conference quick recap
• QA and your features

antoine joux <-- moved to bottom of the etherpad. Along with link.

Q2 Goals

https://intranet.mozilla.org/2013Q2Goals#Security_Engineering

Scheduling

• weekly meeting time not changing -- yet

Web Console Security Errors progress update

• Good to go. New security panel that will have all sorts of goodies (security related) almost done.
• bug 846918 for HSTS

Stanford Security Seminar recap

• Discrete log problem just got easier to solve.
  • http://ellipticnews.wordpress.com/2013/02/25/new-results-on-the-discrete-logarithm-problem-in-finite-fields-of-small-characteristic/
• Dan Boneh was a little bummed by poor implementations of HTTPS (no security at all). But browsers are pretty good.