Identity/EngPlan/wVEC

Overview

Identity Engineering plan.

This document addresses the build portions of the Identity service, including the Verified Email Protocol (VEP), Verified Email Service (VES), Web Based Verified Email Client (wVEC), Firefox Native Verified Email Client (fVEC)

Key People

Technical Lead:	Rob Miller
Additional Developers:	JR Conlin, Dave Dahl
Project Manager:	Dan Mills
Product Manager:	Dan Mills
UX:	TBD

Work Items

Web Verified Email Client (wVEC)

Local crypto implementation, (notably Random Number Generator)

Assigned to:	rmiller
Bug:	664593
Assumes/Depends On:	InfraSec sign off on secure javascript crypto library
Working Estimate:	2 days Best case: 1 day Worst case: Unknown Most Likely: 2 days (provided InfraSec sign off)

UI responsibilities (IOW: what UI elements live on the server vs. what are presented from inside the library)

Assigned to:	rmiller
Bug:	664594
Assumes/Depends On:	UX fully defined.
Working Estimate:	2 days Best case: 0.5 days Worst case: 4 days Most Likely: 2 days

create 'navigator.id' client wrapper and inter-frame communications

Assigned to:	rmiller
Bug:	664597
Assumes/Depends On:
Working Estimate:	1 day Best case: 1 day Worst case: 2 days Most Likely: 1 day

Create iframe containing actual client implementation, along with RP handshake

Assigned to:	rmiller
Bug:	664598
Assumes/Depends On:
Working Estimate:	3 days Best case: 2 days Worst case: 6 days Most Likely: 2 days

UI for displaying / selecting verified email addresses

Assigned to:	rmiller
Bug:	664599
Assumes/Depends On:	UI finalized
Working Estimate:	2 days Best case: 1 days Worst case: 5 days Most Likely: 2 days

Jasmine test coverage

Assigned to:	rmiller
Bug:	664601
Assumes/Depends On:
Working Estimate:	3 days Best case: 2 days Worst case: 5 days Most Likely: 3 days

Documentation

Assigned to:	rmiller
Bug:	664600
Assumes/Depends On:
Working Estimate:	2 days Best case: 1 day Worst case: 4 days Most Likely: 2 days

Security Review

Assigned to:	rmiller
Bug:	TBD
Assumes/Depends On:	requires InfraSec
Working Estimate:	2 days Best case: Worst case: Most Likely:

Packaging and Deployment

Assigned to:	rmiller
Bug:	TBD
Assumes/Depends On:
Working Estimate:	5 days Best case: Worst case: Most Likely:

Timeline

Milestones

Milestone 1: Complete client library code

• library creates navigator.id component which generates RSA signed identity assertions
• library generates headless and headed iframes for connections to the Identity Authority
• Working Estimate: TBD days
• Completion Date: TBD

Milestone 2: Library fully functional

• library able to be embedded on 3rd party site and provide authenticated identity information using the Verified Email Protocol.
• Working Estimate: TBD days
• Completion Date: TBD

Milestone 3: QA and Infrasec signoff

• library test suite is finalized and infrasec has reviewed the code and found no major security violations.
• Working Estimate: TBD days
• Completion Date: TBD