Security

Welcome to the Mozilla Security wiki. There is not much here yet so feel free to contribute.

Security-related bugs

• Security Severity Ratings
• How to report a security issue
• Want to fix a security bug? Here is a list of old thorny bugs you can take on.

Security reviews for new features/products

Main Article: Security/Reviews

• Find past reviews by Category:SecReview

Security Radar

Unlinked Discusions
WebRTC

Security Feature Development

Main article: Security/Roadmap

Main article: Privacy/Roadmap

Security Initiatives

• Security/TeamEmbedding
• Prioritizing and driving non-feature work: Security/Driving

Security Resources and Blogs

Mozilla Official Sites

• Mozilla Security Center
• Mozilla security developer docs
• Mozilla CA Root Program
• Mozilla Security blog
• Mozilla WebApp Sec Blog
• Secure Coding Guidelines for Webapps

Personal Security Related Blogs of Mozillians

• <a href="http://blog.mozilla.com/ladamski">Lucas Adamski's blog</a>
• <a href="http://blog.sidstamm.com">Sid Stamm's blog</a>
• <a href="https://spartiates.wordpress.com/">Curtis Koenig's blog</a>
• <a href="http://www.squarefree.com/">Jesse Ruderman's blog</a> (<a href="http://www.squarefree.com/categories/fuzzing/">fuzzing entries</a>, <a href="http://www.squarefree.com/categories/security/">security entries</a>)
• <a href="http://michael-coates.blogspot.com/">Michael Coates</a>
• <a href="http://blog.mozilla.com/imelven">Ian Melven's Mozilla/Security blog</a>
• <a href="http://blog.mozilla.com/decoder">Christian Holler's blog (decoder)</a>

Twitter Accounts of Security Mozillians

• Mozilla Security
• Mozilla Security
• Jesse Ruderman
• Curtis Koenig (all kinds of random stuff)
• Michael Coates
• Tom Lowenthal (privacy)
• Lucas Adamski
• Alex Fowler
• Yvan Boily
• Daniel Veditz
• Al Billings (but mostly Buddhist and Hackerspace tweets)
• Ian Melven
• Guillaume Destuynder
• Gary Kwong (all sorts of stuff)
• Christian Holler (decoder)

Non-Mozilla Resources (blogs, news sites, twitter, tools)

• Other Security Resources

Meeting Notes

SecTeam Meetings

Meetings

AppSec Meetings 2012 2012-02-13 SecTeam Meetings 2012 2012-02-01 2012-01-25 2012-01-18 2012-01-11 2012-01-04 SecTeam Meetings 2011 2011-12-28 2011-12-21 2011-12-14 2011-12-07 2011-11-30 2011-11-23 2011-11-16 2011-11-09 2011-11-02 2011-10-26 2011-10-19 2011-10-12 2011-10-05 2011-09-28 No meeting on 9/14 (All Hands) or 9/21 (Fuzzing Work Week) 2011-09-07 2011-08-31 2011-08-24 Life Cycle discussion 2011-08-17 2011-08-10 2011-07-27 2011-07-20 2011-07-13 2011-07-06 2011-06-29 2011-06-22 2011-06-15 2011-06-08 2011-06-01 Joint Secteam-Infrasec Meetings 2012 2012-01-12 Joint Secteam-Infrasec Meetings 2011 2011-12-15 2011-11-17 2011-10-06 2011-09-08 2011-08-25 2011-08-11 2011-07-28 2011-06-16