TPE SecEng/2016 Q3 Deliverables

From MozillaWiki
Jump to: navigation, search

Project Milestones

Taipei SecEng Project Milestones Q3 2016.png

Q3 2016 Deliverables

Referrer Policy

  • To support Referrer Policy HTTP header (bug 1264164) (target date: August 1 for Firefox 50)
  • To implement new referrer policies in the spec (bug 1276836) (target date depends on the spec change)
  • To accomplish bug triage for all backlog bugs for referrer policy
  • To identify P1 and P2 bugs to resolve in the next quarter

SafeBrowsing

SafeBrowsing v4

  • To complete a design and implementation plan for SafeBrowsing v4 spec (meta bug 1167038)
  • https://wiki.mozilla.org/Security/Safe_Browsing/V4_Implementation
  • To accomplish the first two milestones in the plan
    • Milestone 0: (target date: July 31)
      • Send v4 update request on time
      • Parse v4 update response but not store to disk
      • Use v4 request backoff settings
    • Milestone 1: (target date: September 30)
      • Store v4 tables to disk (including fixed and variable length prefixes)
      • Store table states
      • Split v4 tables to different directory per provider

SafeBrowsing v2

  • To accomplish bug triage with module peer (Francois Marier) for SafeBrowsing module (120+ bugs)
  • To improve stability and quality of SafeBrowsing module
    • Measured by resolving at least 10 P1/P2 backlog bugs

Tor Integration

  • First-party isolation (target date: November 7 for FF 52), deliverables in Q3:
    • To complete the first-party isolation framework (bug 1260931)
    • To land 50% of first-party isolation bugs (8 bugs in total)
    • To design and implement a testing framework for first-party isolation
    • To land 50% for first-party isolation testing bugs (10 bugs in total)
  • Tor patch uplift (target date: Q1 2017), deliverables in Q3:
    • To land 30% of Tor uplift bugs (35 bugs in total)
  • To deliver a mid-term plan for Tor integration

Containers

  • To resolve all P1 and P2 bugs
  • To resolve at least 90% crash and regression bugs
  • To land 40% of testing bugs (20 bugs in total)
  • To deliver a long-term project plan by working with platform counterparts.

AsyncOpen2 (Security by Default)

  • To deliver a plan for AsyncOpen2 (meta bug 1182535) including the following information:
    • how many and what bugs will we take, and
    • the schedule estimation

DOM Security

  • To participate at least 80% of DOM: Security bug triage meetings (every week)
  • To resolve at least 90% of backlog bugs assigned to Taipei SecEng team