Update:Requirements/LegalAndReview - Revision history

Aggro: /* Mozilla Software Integrity Guidelines */

2005-07-31T19:07:05Z

Mozilla Software Integrity Guidelines

← Older revision		Revision as of 19:07, 31 July 2005
Line 38:		Line 38:
	# A Privacy Policy must be displayed and agreed to by the end-user during installation if any hosted software collects (e.g. keystroke logging, network monitoring, etc.) or disseminates user data or if network connections beyond user initiated normal browsing are made. <small>[1]</small>		# A Privacy Policy must be displayed and agreed to by the end-user during installation if any hosted software collects (e.g. keystroke logging, network monitoring, etc.) or disseminates user data or if network connections beyond user initiated normal browsing are made. <small>[1]</small>
	# All hosted software '''must''':		# All hosted software '''must''':
	## ~~Have an update~~ URL ~~that is~~ addons.mozilla.org		## Update URL must not be specified. addons.mozilla.org is used automatically when there is no updateURL.
	## Be useful and of high quality		## Be useful and of high quality
	## ...		## ...

Cbeard at 17:39, 1 June 2005

2005-06-01T17:39:48Z

← Older revision		Revision as of 17:39, 1 June 2005
Line 1:		Line 1:
	~~'''POSTED FOR FEEDBACK AND REVIEW'''~~		Posted by cbeard and dveditz.

			'''FOR FEEDBACK AND REVIEW'''

	== Mozilla Policies & Legal Requirements ==		== Mozilla Policies & Legal Requirements ==

Cbeard: /* Mozilla Policies & Legal Requirements */

2005-05-31T22:47:48Z

Mozilla Policies & Legal Requirements

← Older revision		Revision as of 22:47, 31 May 2005
Line 1:		Line 1:
			'''POSTED FOR FEEDBACK AND REVIEW'''


	== Mozilla Policies & Legal Requirements ==		== Mozilla Policies & Legal Requirements ==

Cbeard: published for comments and revisions

2005-05-31T22:43:18Z

published for comments and revisions

New page

== Mozilla Policies & Legal Requirements ==

''V0.2''

All Extensions and Themes hosted by mozilla.org must meet certain standards for quality and security, consistent with the Mozilla brand and reputation.

We enforce these standards through a variety of means, including:

# Requiring all individuals, groups, and companies to agree to the terms of the [[Mozilla Software Publishing Agreement]] before any Extension, Theme, or Plugin is hosted.
# Providing a reporting mechanism on all hosted software allowing users to report potential copyright infringement or malicious code. [1]
# Automated and manual review of all code to ensure code complies with the [[Mozilla Software Integrity Guidelines]]. [2]


'''Notes:'''

''[1] We can accomplish this by adding a "Report Spyware" or similar link which creates a database entry, or bugzilla bug entry, or posts to a mailing list such that we can follow up when we see multiple or credible reports or someone doing something Evil.''

''[2] In addition to "UMO admins" review, we can also provide a "View Source" link in the online entry to allow people the opportunity to view code through some form of lxr interface without having to install the .XPI.''


=== Mozilla Software Publishing Agreement ===

''V0.0''

''Under development with legal group, but similar in setup to how we manage CVS access but with additional requirements to ensure limit of liability and confirmation on who the publisher is.''

=== Mozilla Software Integrity Guidelines ===

''V0.2''

Above all else, an Extension or Theme hosted by mozilla.org must not do anything that compromises the integrity or security of the end-user. It must not do anything Evil. There must be no doubt that it is only doing what it advertises to be doing. UMO Admins will have wide discretion and authority to make subjective judgments on the integrity of any software submitted for hosting.

# All hosted software must be in an acceptable source format. It does not have to be open source, but code must be licensed such that it can be viewed and read by both mozilla.org staff and potential end-users.
# A Privacy Policy must be displayed and agreed to by the end-user during installation if any hosted software collects (e.g. keystroke logging, network monitoring, etc.) or disseminates user data or if network connections beyond user initiated normal browsing are made. [1]
# All hosted software '''must''':
## Have an update URL that is addons.mozilla.org
## Be useful and of high quality
## ...
# All hosted software '''must not''':
## Change any update URLs on Firefox or any other application, Theme, Extension or Plugin
## Change any browser setting without explicitly notifying and getting permission from the end-user by way of a dialog
## ...


'''Notes:'''

''[1] Perhaps we accomplish this with some sort of easy to use rating system, with visual cues of what different software does, as there are certainly legitimate uses, like, say, the Amazon browser.''