Meeting Info

• Time: 2015/10/14 (Wed), 11AM
• Room: 5F, Santos
• Host: Ethan
• Attendees: Dimi, Henry, Jonathan, Tim, Thomas, Winnie, Yoshi

Agenda

1. Weekly status update
2. Skip level meeting (10/27)
3. 2015 Q4 goal setting
   • https://wiki.mozilla.org/TPE_CONNECTIVITY_GROUP/2015-10-13#2015_Q4_Goal_Setting
4. 2.5 blockers and root cause analysis
   • Dashboard: http://charts.mozilla.org/fxos/blockers.html#project=1.4,2.0,2.1,2.2,2.5
5. Meeting time
6. Initiative of Orlando WW
7. Progress of NSec this week: What can we deliver? What blocks us?

Weekly Status Update

Dimi Lee

• Done & Working in Progress

1. bug 1207727 - Rework updating service workers according to the latest spec. f+

• Review & Feedbacks

• Pending

1. bug 1181389 - check for full package update when doing service worker update
2. bug 1181390 - fire install and activate events on service worker
3. bug 1179064 - Ensure that service worker code for signed packages is contained within the package

Ethan Tseng

• New Security Model
  1. bug 1165267 - Use OriginAttributes for nsCookieService (landed last week)
  2. bug 1214071 - Add APIs get/removeCookiesForOriginAttributes() in nsICookieManager2.idl (ongoing)
  3. bug 1179060 - Apply a default CSP for signed packaged content (feedback+ from Christoph)
• Review patch: Bug 1204846 - Amount of mobile data consumed regresses
• Management
  1. Complete 2015 Q4 goal settings

Henry Chang

1. Bug 1210573 - Add packageIdentifier attribute to nsIPackagedAppUtils
   1. To parse the 'package-identifier' from the manifest file.
   2. Landed.
   3. A prerequisite of Bug 1178526
2. Bug 1212223 - nsMultiMixedConv might call |SendData| with incorrect buffer length
   1. Landed
   2. Fixed corrupt manifest file issue.
3. Bug 1210235 - Pref off any signed web packaged app things
   1. r+'d by Valentin.
   2. Requires pref "network.http.packaged-signed-apps-enabled" to enable "signed package verification"
   3. Also, this patch would bypass the verification process if a package has no signautre (performance issue.)
4. Bug 1214079 - Doom all the cache of the signed packaged web app if it's not verified.
   1. I was hoping to solve Bug 1190757 ([PackagedAppService] Delete all cached files if a package downloading in interrupted.) but Honza has some concerns so I just focus the special case: "verification failure" first.
5. Bug 1178526 - Set appropriate origin attributes for signed packages
   1. Only last one patch waiting for Honza's review.
   2. was suppose to review on Monday Oct 12
6. Bug 1180088 - Fix security checks so that they work without appid by tagging a child process with a package identifier.

Jonathan Hao

• bug 1178448 - Let developer add their own trusted CA
  • r-. I shouldn't do file I/O on main thread.
• bug 1205209 - [RTSP]When user connects a special RTSP link, the crash will happen.
  • Landed.
• bug 1207964 - Remove workaround from bug 1080461
  • To remove a workaround blocking RTSP live streams.
  • Need to find RTSP live stream links to test.

Tim Huang

• bug 1204846 - Amount of mobile data consumed regresses
  • The patch has submitted.
• bug 1131493 - [Wifi Direct] Support bonjour/upnp service advertisement
  • Studying the Wifi Direct.
• bug 1207066 - [NetworkManager] implement nsINetworkInterface.activate()/deactivate() in wifi network interface
  • Planning how to implement this feature.

Thomas Nguyen

• bug 1168704 - rename setFocusApp in nsINfcContentHelper
  • r+, Waiting try
• bug 1166210 - Remove ServicesSetting changes listener in NfcContentHelper
  • Clarified and provided solution
• bug 1201427 - [Aries] NFC Tap-to-Pay dose not work
  • Working

Winnie Sun

• bug 1187262 - A device cannot connect B device through wifi
  • Finally r+ !!!!!!!!!!!!!!!!!!!!
• Find out the flow chart to make service discovery of wifi direct
  • Thanks to Henry!!!!
• Study on the current code, and think about how to make out the flow.
  • How to send command to wpa_supplicant -> WifiCommand.jsm
  • How to new a new event of p2p -> WifiWorker.js
  • How to get "p2p_peers" 's result - > Add a listener of "scanresult"
  • How to get the response? -> Add an event "P2P-SERV-DISC-RESP" in WifiP2pManager.jsm

Yoshi Huang

• Bug 1196665 - Add originAttributes into SpecialPowers
  • WIP patch, but still have some orange error on try.
• Bug 1191653 - Listen to clear-origin-data in nsPermissionManager.cpp
  • ongoing.

2015 Q4 Goal Setting

Also recorded in https://wiki.mozilla.org/TPE_CONNECTIVITY_GROUP/2015-Q4

New Security Model

1. Deliver a usable first prototype (Henry, Jonathan)
2. Complete all features of NSec
   • Signing (Jonathan)
   • Verifying signatures (Henry, Jonathan)
   • CSP (Ethan)
   • Process isolation (Henry)
   • Installing and updating (Henry)
   • Service Workers (Dimi)
   • Origin and cookies jars (Yoshi, Ethan, ...)
3. Enhancement of NSec
   • Add test cases (Henry, ...)
   • Add debugging tools (Henry, ...)
4. Demonstrate NSec in Orlando work week

Maintenance of Owned Modules

1. Fix 2.5 blockers
   • Wi-Fi (Henry, Tim)
   • Alarm and system message (Henry, Tim)
   • NetworkStats (Ethan, Tim)
   • NFC (Dimi, Thomas)
   • RTSP (Jonathan)
2. New features
   • Wi-Fi change to support NetworkManager enhancement (Tim)
   • Service Discovery of Wi-Fi Direct (Tim)
   • Polish NFC on features, emulator and test cases (Thomas)

Long Term Plan

1. Integrate New Security Model with Gaia (NGA?)
2. TBD