SecurityEngineering/2013: Difference between revisions
Jump to navigation
Jump to search
| Line 7: | Line 7: | ||
* Implement: Click-To-Play plugins for Firefox ({{bug|738698}}) | * Implement: Click-To-Play plugins for Firefox ({{bug|738698}}) | ||
* Implement/Evangelize: CSP 1.0 for Firefox platform ({{bug|663566}}) | * Implement/Evangelize: CSP 1.0 for Firefox platform ({{bug|663566}}) | ||
* Implement/Evangelize: Mixed Content Blocker ({{bug|815321}}) | |||
== Build Security and Privacy into Mobile == | == Build Security and Privacy into Mobile == | ||
Revision as of 18:17, 19 June 2013
Working towards our team Strategy, this is what we will work towards in 2013.
Make Firefox More Secure
- Evangelism: Larissa's airmo talk on secure UX design was picked up by chromium
- Implement: Sandboxing on Linux and E10S (bug 653064)
- Implement: Click-To-Play plugins for Firefox (bug 738698)
- Implement/Evangelize: CSP 1.0 for Firefox platform (bug 663566)
- Implement/Evangelize: Mixed Content Blocker (bug 815321)
Build Security and Privacy into Mobile
- Consult: B2G App Security Model
- Implement: CSP for apps on B2G (bug 773891)
- Implement/Evangelize: Third Party Cookie blocking bug 818430, though evolving, will improve control
- Research: Collusion project improved transparency and generated buzz
- Research: DNT statistics made available by the web
Build Security into Web Communications
- Research: Web Crypto
- Implement: Certificate Revocation upgrades