Agenda

• Winter of Security
• Status Updates
  • openpgpjs http://openpgpjs.org/
    • pentest of mailvelope (using openpgpjs) https://cure53.de/pentest-report_mailvelope.pdf
• ocsp stapling (must-staple)
  • https://wiki.mozilla.org/CA:ImprovingRevocation
    • https://wiki.mozilla.org/CA:ImprovingRevocation#OCSP_Must-Staple
  • IETF draft http://tools.ietf.org/html/draft-hallambaker-tlsfeature-04
  • Videur: Nginx WAF in Lua
    • https://github.com/mozilla/videur

Status Updates

• ulfr
  • More compliance work, now showing only the last known state
    • http://mozdefqa1.private.scl3.mozilla.com:9090/index.html#/dashboard/elasticsearch/System%20Compliance
  • Now working on the MIG Console
    • http://www.zimagez.com/zimage/screenshot-06172014-125352am.php
• psiinon
  • pto
• mgoodwin
  • • out of office
• st3fan
  • csp thing first steps
• freddy
  • escape-artist now works in Java (rhino)