Security/Features/Application Reputation Design Doc: Difference between revisions

Line 29: Line 29:


== Local lists ==
== Local lists ==
Application reputation requres two lists, goog-badbinurl-shavar for blocklisting and goog-downloadwhite-digest256 for allowlisting. Both of these lists are updated in the same way as existing Safe Browsing lists [https://developers.google.com/safe-browsing/developers_guide_v2#HTTPRequestForList]. The shavar list is an existing format. The digest256 list is similar to shavar, except that all of its entries are the full 256-bit hash. Lookups based on increasing-sized fragments of the URL happen in exactly the same way.
The Chrome implementation for the digest256 list can be found in SafeBrowsingProtocolParser [https://code.google.com/p/chromium/codesearch#chromium/src/chrome/browser/safe_browsing/protocol_parser.cc]. The Firefox implementation for the digest256 list may be found in ProtocolParser [http://mxr.mozilla.org/mozilla-central/source/toolkit/components/url-classifier/ProtocolParser.cc].


== Local lookups ==
== Local lookups ==


== Remote lookup ==
== Remote lookup ==
Confirmed users
238

edits