Security/CryptoEngineering: Difference between revisions

whitespace
(correct outdated info, link to preloading)
(whitespace)
 
(2 intermediate revisions by the same user not shown)
Line 1: Line 1:
''Last Updated: 7 Sept 2017''
'''Mission''': Use modern cryptography to improve the security and privacy of Firefox
'''Mission''': Use modern cryptography to improve the security and privacy of Firefox


Line 21: Line 19:


* [[Security/CryptoEngineering/Intermediate Preloading|Intermediate Preloading]]
* [[Security/CryptoEngineering/Intermediate Preloading|Intermediate Preloading]]
* [https://bugzilla.mozilla.org/show_bug.cgi?id=1464828 OS-supplied Data at Rest Protections]


== Web Authentication ==
== Web Authentication ==
Password authentication is known to be a security liability on the Web. The [https://www.w3.org/TR/webauthn/ W3C Web Authentication Working Group is developing a specification] for using Scoped Credentials to supplement or replace passwords. Mozilla intends to continue supporting the Web Authentication (WebAuthn) specification.
See [[Security/Web Authentication]]
 
==== Useful testing sites ====
 
Web Authentication:
* https://webauthn.bin.coffee/
* https://webauthn.io/
* https://webauthndemo.appspot.com/
* https://demo.yubico.com/webauthn/
 
U2F (behind a pref, experimental, not released):
* https://u2fdemo.appspot.com/
* https://github.com/
* https://u2f.bin.coffee/
* https://demo.yubico.com/u2f
122

edits