Security/Meetings/2011-10-06

Updates on Major Projects

• Apps/AppStore - In a good place for security. Lots more devel work to come
• BrowserID - Changes coming. More security development in the works
• Pancake - Still under development. Security providing guidance on server and client

Convergence Notaries

• Should Mozilla host one?
• Background information
  • http://notary1.constructibleuniverse.net/
  • http://www.theregister.co.uk/2011/09/30/qualys_endorses_convergence/
• Related Info
  • Feature required for proper Convergence support: https://bugzilla.mozilla.org/show_bug.cgi?id=644640
• Mini Summit - Need meeting with Moxie, Kaminsky, Eff? - [bsterne sent mail to bsmith about setting up meeting]
• Telemetry to gather results?
• In SF
• Enable experimentation in this space

CSRF Defense Idea

• Discussion / feedback on Mark's CSRF defense idea
• http://people.mozilla.org/~mgoodwin/OriginOnly/
• Good feedback
• Talk with Adam Barth
• Action Item - Mark to setup next meeting with Sid, Brandon, Dan, Michael

Feedback on CSP

• Ability to disable HTML5 capabilities?
• https://bugzilla.mozilla.org/show_bug.cgi?id=666056
• https://bugzilla.mozilla.org/show_bug.cgi?id=667329

WebSockets - testing tools

Team Lunches

• Every other [Tuesday | Thursday] in Mountain View?