Bureaucrats, canmove, Confirmed users
647
edits
Platform/2010-02-16: Difference between revisions
→Security
| Line 104: | Line 104: | ||
** <b>Please make sure sg:critical bugs in your component have owners, and that these bugs don't stay stuck.</b> | ** <b>Please make sure sg:critical bugs in your component have owners, and that these bugs don't stay stuck.</b> | ||
** [https://bugzilla.mozilla.org/buglist.cgi?cmdtype=dorem&remaction=run&namedcmd=sg%3Auntriaged&sharer_id=1689 The few remaining untriaged] have been poked. | ** [https://bugzilla.mozilla.org/buglist.cgi?cmdtype=dorem&remaction=run&namedcmd=sg%3Auntriaged&sharer_id=1689 The few remaining untriaged] have been poked. | ||
* Fix for the TLS Renegotiation bug landed on trunk for testing | |||
** Mostly pref'd off, otherwise the SSL internet will break, but that means still vulnerable to attacks on initial negotiation | |||
** Will not renegotiate except with a patched server -- SSL client-auth broken on unpatched servers | |||
** see [[Security:Renegotiation]] for prefs to make test builds stricter or less strict | |||
= Breakpad = | = Breakpad = | ||