SecurityEngineering/Public Key Pinning/ReleaseEngineering

From MozillaWiki

< SecurityEngineering‎ | Public Key Pinning

Revision as of 23:31, 22 May 2014 by Mmc (talk | contribs) (→‎What about other platforms besides desktop?)

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

Jump to navigation Jump to search

Whom to contact in case of emergency

seceng@mozilla.org

Implementation status

Pinning is enabled by default in Nightly 32.

What critical Mozilla properties are we planning to pin?

AMO

How to rollback pinning for Firefox

Pinning is controlled by a preference, security.cert_pinning.enforcement_level. To disable pinning, set this pref to 0. In case of emergency, we can

Push a hotfix to disable the pinning pref. In case pinning breaks AMO, this will not be possible.
Push a chemspill.

How long do updates take?

Hotfix: almost all users in 2 days
Chemspill: unknown
Fennec (Google play): Majority users in 2 days

What about other platforms besides desktop?

In bug 1012882, we decided to not pin on b2g right now.

Retrieved from "https://wiki.allizom.org/index.php?title=SecurityEngineering/Public_Key_Pinning/ReleaseEngineering&oldid=981893"