Security/Meetings/Automation/2014-10-07

Agenda

• status updates
• storing certificates

Status Updates

• freddy
  • b2g-modify tool https://github.com/mozfreddyb/b2g-vivisection
  • gaia tech talk upcoming
    • https://mozfreddyb.github.io/template-strings-preso/html5/template-strings.html

• psiinon
  • JavaOne (& computer crashes? :p)
  • ZAP ease of use
  • ZAP licensing
  • ZAP HUD
  • ZAP 2.4.0 code freeze end of month
• ulfr
  • TLS improvements & cipherscan work
    • mapping cipherscan results to a reference configuration from https://wiki.mozilla.org/Security/Server_Side_TLS#Recommended_configurations
• jeff
  • http://demo.mozdef.com:3000 is live and still working!
  • bsides presentation up at: http://jeffbryner.com/bsidespdx2014
  • v1.2 due next week
• mgoodwin
  • I did some SRI / CAS thinking (I think I fixed a problem and came up with a new one)

Storing certificates

• storing the file? as ascii-file? as binary-encoded file?
• freddy says: slightly related thread about cert management in general @ https://lists.eff.org/mailman/listinfo/crypto-ops