canmove, Confirmed users
1,537
edits
No edit summary |
|||
| Line 9: | Line 9: | ||
;Who: Tanvi, Christoph, Garrett, Sid | ;Who: Tanvi, Christoph, Garrett, Sid | ||
* {{ | * {{done|Gecko Security Hooks: Finish code and debugging for New Channel API, start getting reviews.}} See {{bug|1038756}}, {{bug|1006881}} (dri=tanvi) | ||
* {{ | * {{defer|Gecko Security Hooks: Create plan for addon compatibility - nothing to do yet}} (dri=tanvi) | ||
* {{done|CSP: Remove old JS implementation from mozilla-central. Target Fx34.}} See {{bug|994782}} (dri=sstamm) | * {{done|CSP: Remove old JS implementation from mozilla-central. Target Fx34.}} See {{bug|994782}} (dri=sstamm) | ||
* {{ | * {{done|Evangelism: Security blog post about new CSP implementation, maybe again as brown bag.}} (dri=sstamm) | ||
* {{ok|''[stretch goal]'' CSP: Fix majority of CSP 1.1 compatibility bugs.}} See [https://etherpad.mozilla.org/CSP-1-1 planning etherpad] (dri=ckerschb) | * {{ok|''[stretch goal]'' CSP: Fix majority of CSP 1.1 compatibility bugs.}} See [https://etherpad.mozilla.org/CSP-1-1 planning etherpad] (dri=ckerschb) | ||
| Line 31: | Line 31: | ||
* {{done| Create a mechanism to provision phones with an alternate cert}} (dri=mgoodwin) | * {{done| Create a mechanism to provision phones with an alternate cert}} (dri=mgoodwin) | ||
* {{done| Add measurement/enforcement of compliance with CABF Baseline Requirements}}. See {{bug|1050546}} (dri=keeler) | * {{done| Add measurement/enforcement of compliance with CABF Baseline Requirements}}. See {{bug|1050546}} (dri=keeler) | ||
* {{ | * {{done| Create a tool for testing CA certificate compliance and EV-readiness}}. See {{bug|926599}} and {{bug|1029095}} (dri=keeler) | ||
* {{ok| Add support for key wrap/unwrap and ECC in WebCrypto}} (dri=rbarnes) | * {{ok| Add support for key wrap/unwrap and ECC in WebCrypto}} (dri=rbarnes) | ||
* {{risk| ''[stretch goal]'' Enable revocation of intermediate CAs through block list service}} (dri=mgoodwin, keeler) | * {{risk| ''[stretch goal]'' Enable revocation of intermediate CAs through block list service}} (dri=mgoodwin, keeler) | ||
* {{done| ''[stretch goal]'' Retire first batch of 1024-bit roots, working towards requiring 2048-bit keys for built-in root certificates}} (dri=kathleen) | * {{done| ''[stretch goal]'' Retire first batch of 1024-bit roots, working towards requiring 2048-bit keys for built-in root certificates}} (dri=kathleen) | ||
* {{ok| ''[stretch goal]'' Get CA Program data into one database}} (dri=kathleen) | * {{ok| ''[stretch goal]'' Get CA Program data into one database}} (dri=kathleen) | ||