Networking/Archive/IndividualPriorities: Difference between revisions

From MozillaWiki
Jump to navigation Jump to search
(Created page with "= Individual Priorities = Only networking team members should be changing priorities. If you have questions about priorities or anything else on this list please email the relev...")
 
m (Manuel Bucher moved page Networking/IndividualPriorities to Networking/Archive/IndividualPriorities: move to necko archive)
 
(365 intermediate revisions by 11 users not shown)
Line 1: Line 1:
{{Template:Archived}}
Please see [[Networking/TeamPriorities]] for team priorities.
= General Priorities for All Team Members =
These priorities apply to all team members at all times:
# Resolve security bugs rated sg:moderate or higher.
# Review requests older than one week.
These should be taken care of before any other work is done.
= Individual Priorities =
= Individual Priorities =
These priority lists should reflect the work that each individual is planning to do, in the order in which they plan to do it.


Only networking team members should be changing priorities. If you have questions about priorities or anything else on this list please email the relevant person or [mailto:josh@mozilla.com Josh Aas] (networking team manager).
Only networking team members should be changing priorities. If you have questions about priorities or anything else on this list please email the relevant person or [mailto:josh@mozilla.com Josh Aas] (networking team manager).
Line 5: Line 20:
== [mailto:mnovotny@mozilla.com Michal Novotny] ==
== [mailto:mnovotny@mozilla.com Michal Novotny] ==


# IPv6 bug {{nbug|504014}}.
# {{bug|436414}}, OCSP client should be able to use HTTP GET as well as POST
# Work on mobile disk cache.
# {{bug|558253}}, Proxy Auto Config (PAC) Extended functions for multi-resolution and ipv6
# {{bug|529733}}.
# {{bug|586661}}.


== [mailto:bherland@mozilla.com Bjarne Herland] ==
== [mailto:jduell@mozilla.com Jason Duell] ==


# Awaiting check-in bug {{nbug|654926}}.
Top Priorities:
# Awaiting review bug {{nbug|650995}}.
# Fix bug {{nbug|661115}}.
# Work on mobile cache.
# Work on bugs {{nbug|575928}}, {{nbug|613159}}
# Understand implications and consequences of bug {{nbug|602611}} better


== [mailto:jduell@mozilla.com Jason Duell] ==
# Bug 558623 - e10s HTTP: combine PHttpChannel constructor with SendAsyncOpen/SendRedirect1Begin. Jason will do this.
# [NEEDSBUG]: make JAR channels seekable. Jason will do this.
# Bug 746073 - Meter network usage per "web app". Jason will do this.


# finish HTTP headers patch for bug {{nbug|655389}}.
Future:
# Review remote websockets {{nbug|537787}}.
# Review [https://bugzilla.mozilla.org/show_bug.cgi?id=580099 DNS startup prefetch]
# mobile cache research/redesign.
# Look into replacing our URL parser with google-url library
# IETF IRI Unicode URL spec work
# lots of little bugs and more reviews...


== [mailto:bsmith@mozilla.com Brian Smith] ==
# {{nbug|781392}} mochi.tests hitting proxy error on B2G hardware
 
# {{nbug|782542}} Secure necko IPDL usage
* Ongoing: Help intern David Keeler on DNSSEC-based TLS (Keelerification).
# {{nbug|794978}} Always delete app's cookies even if the cookies have not been loaded yet
 
# {{nbug|799212}} - Cookies: add test for webapps-clear-data with browserOnly=true
# {{nbug|468736}} PSM nsPSMBackgroundThread::requestExit is racy and not threadsafe
# More reviews
# Finalize WebSockets security review.
# {{nbug|711886}} (write test for) Refuse connection if server replies with non-matching subprotocol
# {{nbug|664542}}
# {{nbug|792238}} - Convert IPC::SerializedLoadContext to use newer IPDL parameter style
# Test PSM using libpkix vs current cert chain building using SSLLabs and/or EFF SSL Observatory data sets.
# benchmark Websocket latency peformance vs Chrome
# Security review of syn retry - bug {{nbug|651635}}
# Better error messages for HTTP CORRUPT error {{nbug|688345}}.
# Remove SSL 2.0 support
# {{nbug|698692}} Make WebSocket.close() prevent any more events from firing
# Bug 660749 - PSM doesn't revalidate certificates of resources from the cache.
# {{nbug|704447}} Improve large blob support for WebSockets
# Remove support for weak crypto (https://www.wsjsafehouse.com/)
# write Necko e10s documentation
# Fix bug {{nbug|650307}} - Certificate chain is verified twice for EV certificates
# Fix bug {{nbug|481656}} - Change cert viewer to validate/build cert chains the same way they are used for trust decisions
# Fix bug {{nbug|650296}} - PSM may report a different certificate error than what was originally encountered
# Drive certificate exclusion standard (DANE, or a lightweight DANE-like mechanism) forward
# Any libpkix fixes identified during libpkix testing.
# Fix bug {{nbug|651246}} - Make libpkix-based certificate path building/validation the default in PSM (bigger project than I initially expected; see growing list of blocking bugs. Will require lots of testing.)
# Review rrelyea's patches for bug {{nbug|470994}} (and related bugs) - Complete active distrust in NSS
# TLS compression (Google already wrote patches, but they may require some cleanup and we need to enable the feature in PSM.)
# Patches to NSS needed to support NSS/PSM startup time improvements (bug {{nbug|648407}}, bug {{nbug|648435}}, bug {{nbug|648431}})
# Review bug {{nbug|360420}} - Implement OCSP Stapling, and follow-ups to enable the feature in PSM
# Finalize NSS release and import into mozilla-central
# PSM startup time improvements (bug {{nbug|648407}}, bug {{nbug|648435}}, bug {{nbug|648431}})
# Review/help on bug {{nbug|644640}} - Implement callbacks to augment validation checking (assigned to Kai) - for extensions to prototype DNSSEC
# Implement ability for HTTPS servers to opt in to pipelining even when it is off by default. (Could/should be given to Patrick?)
# Drive decision on acceptable cert validation staleness (no bug, related to bug {{nbug|643916}}, will try to pass off to Gervase)
# Implement subscription-based blocklisting of certs via update ping (Bug {{nbug|647868}}, bug {{nbug|643982}}) - High risk of slipping
# Fix bug {{nbug|646156}} - Delete or Distrust doesn't work with multiple selected certs
# Fix bug {{nbug|640625}}
# Fix bug {{nbug|590364}} - Stop accepting MD5 as a hash algorithm by June 30, 2011
# Fix bug {{nbug|650355}} - Stop accepting MD5 as a hash algorithm in PSM on June 30, 2011
# Fix bug {{nbug|508633}} and {{nbug|511393}} - de-serialize TLS connections.


== [mailto:hbambas@mozilla.com Honza Bambas] ==
== [mailto:hbambas@mozilla.com Honza Bambas] ==


Now
* new cache implementation (70-80% of all my time dedicated to it)
# Review pipelining patches from Patrick McManus (large backlog)
* improve event tracer
# Bug {{nbug|621558}} - Implement "happy eyeballs" IPv6 autodetection at TCP open, or similar
* {{nbug|466524}} allow ssl in xpcshell tests + * {{nbug|766166}} Have a service protocol to communicate with ssltunnel
# Basic network timing data for telemetry:
* {{nbug|871323}} Fix and enable offline cache mochitests for B2G
## bug {{nbug|658894}} - HTTP basic telemetry
* {{nbug|627635}} Make remote localStorage not block the UI main thread on disk IO
## bug {{nbug|662555}} - Http channel timing race condition
** I'd like to push this one to someone else
## bug {{nbug|539093}} - Implement high-resolution platform timers for Tier I platforms
* {{nbug|832540}} Optimize child implementation of localStorage async database API
# Review bug {{nbug|507361}} - localStorage doesn't work in file:/// documents
* {{nbug|842777}} preload webappsstore.sqlite on first access to warm cache + use CHUNK_SIZE of 1meg
# Bug {{nbug|654081}} - Firefox 4 doesn't cache font file in TTF or WOFF format (analyze)
* {{nbug|834301}} Implement memory reporter for DOM storage
# Bug {{nbug|652440}} - auto dial helper does not pop up when open web page
* {{nbug|851310}} The wrong local storage area is shown to chrome code when a session-only exception applies
# Bug {{nbug|480878}} - Generic crash nsSSLThread::requestRecvMsgPeek (depends on Brian's work on removing the SSL thread)
* {{nbug|748620}} When cookie expiration is set to ask every time, localStorage throws a security exception
# Offline Application Cache future, can we turn this to an efficient optimization?
* {{nbug|536509}} localStorage does not obey "third-party cookies" pref
# Telemetry - next steps: measure more correctly, move some measurements to lower levels
* more DOM storage followups (report them)


Next
* {{nbug|830391}} Prevent null dereferences in nsDiskCacheDeviceSQL
# HTTP Preconnections
* {{nbug|814330}} crash in nsOfflineCacheDevice::ChooseApplicationCache
# DNS hostname cache (resolve hosts previously needed by document-level host)
* {{nbug|423758}} Firefox can't authenticate to IIS when minimum NTLM level set to v2
# Mixed content detection
# Bug {{nbug|650279}} - Add timing interface for SSL handshake
# Bug {{nbug|657584}} - Optionally record & return details timing information for certificate path validation / revocation checking
# Bug {{nbug|562917}} - implement captive portal detection


== [mailto:hurley@mozilla.com Nick Hurley] ==
== [mailto:hurley@mozilla.com Nick Hurley] ==


# Work on [https://wiki.mozilla.org/Necko:Testing plans for testing infrastructure].
# [[Necko/Performance/AutomatedTesting|Stone Ridge]]
# Fix bugs {{nbug|41489}}, {{nbug|589292}}, {{nbug|637336}}/{{nbug|637339}}, {{nbug|639959}}, {{nbug|648878}}
# [https://bugzilla.mozilla.org/buglist.cgi?list_id=1427425&emailtype1=exact&emailassigned_to1=1&query_format=advanced&bug_status=UNCONFIRMED&bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&email1=hurley%40mozilla.com Bugs]


== [mailto:pmcmanus@mozilla.com Patrick McManus] ==
== [mailto:pmcmanus@mozilla.com Patrick McManus] ==


# SPDY {{nbug|528288}}
Major items (mostly serial)
# Websockets deflate-stream extension interop problem with pywebsockets. (this extension is currently disabled due to this issue) {{nbug|6585466}}
# TLS false start (q3 goal) 658222 713933
# Websockets - secreview, follow-on issues {{nbug|660613}} {{nbug|661036}}
# pinterest derived work 813707 (tracker) 792438 (block on head scripts) 813712 (connect some blockers) and 813715 (throttle bw of high parallelism)
# {{nbug|658580}} IsAlive() with poll more expensive than msg_peek based read.. responsible for cpu hit on tp4 and syn retry feature. with brian smith's help.
# HTTP2 prototype of SPDY with DNS SRV for IETF work
# Get HTTP pipelining patches into the tree. tracking bug {{nbug|603503}} which includes sub bugs  {{nbug|232030}}  {{nbug|447866}} {{nbug|597684}}  {{nbug|599164}} {{nbug|602518}} {{nbug|603505}} {{nbug|603506}} {{nbug|603508}} {{nbug|603512}} {{nbug|603513}} {{nbug|603514}} {{nbug|615342}} {{nbug|631801}} (this one needs an update by me) {{nbug|632496}}. Primarily waiting on review cycle from honzab, also on operations to do something with 648091. I also continue to actively test and tweak these patches and have recently tried (with mixed success) to break them down and make them a little more accessible. That is ongoing work.
# OCSP stapling with cache anticipation
# DNS bug where multiple A records for a single hostname are not properly handled in the case of failures. {{nbug|641937}}. Need to update based on review comments.
# OCSP GET w/local HTTP stack and cache for persistence (assuming sec ok)
# After a captive portal releases you there might still be a problem due to long term persistent connections - {{nbug|628561}}. I have a patch that will release persistent connections based on shift-reload but it got backed out due to a tp4 regression on win7 only (wtf?).. I'm trying to confirm that this is fixed because of a fix in syn retry
# SPDY push
# {{nbug|649139}} first network access on mobile is slow with mark finkle.
# SPDY/4 (dep: spec stable at this point)
# telemetry - add to necko:telemetry and probably actually try and capture a single piece of data as a proof of concept using mark's add-on.
# TLS Cached Info for eliminating cert chain spills (dep: sec-ok, and stable spec)
# Research on UDP based transports
# Prioritization scheduling of partial resources to reduce ready-to-use time
 
Smaller items (as time allows in no particular order)
# Telemetry for OCSP {Pass/Fail, Time}
# Telemetry for OCSP Cache Anticipation
# Telemetry for TLS Cipher Choice
# 804605 CNAME/NTLM regression of mine
# Fixes to priority levels of existing requests (ping, favicon, etc..)
# Read Handlers For SDPY need to be always engaged
# SPDY: standardization issues
# SPDY Test infrastructure


= Unassigned Priorities =
== [mailto:sworkman@mozilla.com Steve Workman]  ==


* Stop blowing away the cache, at least in a disruptive way, after a crash or leaving private browsing mode.
* Fix two security bugs assigned to me.
* {{nbug|Bug 497003}}: support sending OnDataAvailable() to other threads
* Help implement new disk cache

Latest revision as of 08:23, 24 April 2023

ARCHIVED
This page has been archived and its contents may be out of date.

Please see Networking/TeamPriorities for team priorities.

General Priorities for All Team Members

These priorities apply to all team members at all times:

  1. Resolve security bugs rated sg:moderate or higher.
  2. Review requests older than one week.

These should be taken care of before any other work is done.

Individual Priorities

These priority lists should reflect the work that each individual is planning to do, in the order in which they plan to do it.

Only networking team members should be changing priorities. If you have questions about priorities or anything else on this list please email the relevant person or Josh Aas (networking team manager).

Michal Novotny

  1. bug 436414, OCSP client should be able to use HTTP GET as well as POST
  2. bug 558253, Proxy Auto Config (PAC) Extended functions for multi-resolution and ipv6

Jason Duell

Top Priorities:

  1. Bug 558623 - e10s HTTP: combine PHttpChannel constructor with SendAsyncOpen/SendRedirect1Begin. Jason will do this.
  2. [NEEDSBUG]: make JAR channels seekable. Jason will do this.
  3. Bug 746073 - Meter network usage per "web app". Jason will do this.

Future:

  1. 781392 mochi.tests hitting proxy error on B2G hardware
  2. 782542 Secure necko IPDL usage
  3. 794978 Always delete app's cookies even if the cookies have not been loaded yet
  4. 799212 - Cookies: add test for webapps-clear-data with browserOnly=true
  5. More reviews
  6. 711886 (write test for) Refuse connection if server replies with non-matching subprotocol
  7. 792238 - Convert IPC::SerializedLoadContext to use newer IPDL parameter style
  8. benchmark Websocket latency peformance vs Chrome
  9. Better error messages for HTTP CORRUPT error 688345.
  10. 698692 Make WebSocket.close() prevent any more events from firing
  11. 704447 Improve large blob support for WebSockets
  12. write Necko e10s documentation

Honza Bambas

  • new cache implementation (70-80% of all my time dedicated to it)
  • improve event tracer
  • 466524 allow ssl in xpcshell tests + * 766166 Have a service protocol to communicate with ssltunnel
  • 871323 Fix and enable offline cache mochitests for B2G
  • 627635 Make remote localStorage not block the UI main thread on disk IO
    • I'd like to push this one to someone else
  • 832540 Optimize child implementation of localStorage async database API
  • 842777 preload webappsstore.sqlite on first access to warm cache + use CHUNK_SIZE of 1meg
  • 834301 Implement memory reporter for DOM storage
  • 851310 The wrong local storage area is shown to chrome code when a session-only exception applies
  • 748620 When cookie expiration is set to ask every time, localStorage throws a security exception
  • 536509 localStorage does not obey "third-party cookies" pref
  • more DOM storage followups (report them)
  • 830391 Prevent null dereferences in nsDiskCacheDeviceSQL
  • 814330 crash in nsOfflineCacheDevice::ChooseApplicationCache
  • 423758 Firefox can't authenticate to IIS when minimum NTLM level set to v2

Nick Hurley

  1. Stone Ridge
  2. Bugs

Patrick McManus

Major items (mostly serial)

  1. TLS false start (q3 goal) 658222 713933
  2. pinterest derived work 813707 (tracker) 792438 (block on head scripts) 813712 (connect some blockers) and 813715 (throttle bw of high parallelism)
  3. HTTP2 prototype of SPDY with DNS SRV for IETF work
  4. OCSP stapling with cache anticipation
  5. OCSP GET w/local HTTP stack and cache for persistence (assuming sec ok)
  6. SPDY push
  7. SPDY/4 (dep: spec stable at this point)
  8. TLS Cached Info for eliminating cert chain spills (dep: sec-ok, and stable spec)
  9. Research on UDP based transports
  10. Prioritization scheduling of partial resources to reduce ready-to-use time

Smaller items (as time allows in no particular order)

  1. Telemetry for OCSP {Pass/Fail, Time}
  2. Telemetry for OCSP Cache Anticipation
  3. Telemetry for TLS Cipher Choice
  4. 804605 CNAME/NTLM regression of mine
  5. Fixes to priority levels of existing requests (ping, favicon, etc..)
  6. Read Handlers For SDPY need to be always engaged
  7. SPDY: standardization issues
  8. SPDY Test infrastructure

Steve Workman

  • Fix two security bugs assigned to me.
  • 497003 Bug 497003: support sending OnDataAvailable() to other threads
  • Help implement new disk cache