SecurityEngineering/Public Key Pinning/ReleaseEngineering

From MozillaWiki

< SecurityEngineering‎ | Public Key Pinning

Revision as of 23:03, 22 May 2014 by Mmc (talk | contribs)

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

Jump to navigation Jump to search

Whom to contact in case of emergency

seceng@mozilla.org

Implementation status

Pinning is enabled by default in Nightly 32.

What critical Mozilla properties are we planning to pin?

AMO

How to rollback pinning for Firefox

Pinning is controlled by a preference, security.cert_pinning.enforcement_level. To disable pinning, set this pref to 0. In case of emergency, we can

Push a hotfix to disable the pinning pref. In case pinning breaks AMO, this will not be possible.
Push a chemspill.

Retrieved from "https://wiki.allizom.org/index.php?title=SecurityEngineering/Public_Key_Pinning/ReleaseEngineering&oldid=981885"