canmove, Confirmed users
1,537
edits
SecurityEngineering/2014/Q3Goals: Difference between revisions
→Communications Security
mNo edit summary |
|||
| Line 24: | Line 24: | ||
== Communications Security == | == Communications Security == | ||
;Outcome: Fresher/more accurate revocation information and progress towards defeating certificate misissuance and Man-In-The-Middle attacks. | ;Outcome: Fresher/more accurate revocation information and progress towards defeating certificate misissuance and Man-In-The-Middle attacks. | ||
;Who: Richard, Kathleen, Keeler, Camilo, Harsh, Monica | ;Who: Richard, Kathleen, Keeler, Camilo, Harsh, Garrett, Monica | ||
* {{prev|SSL Error Reporting | * {{prev|SSL Error Reporting finish first implementation of ssl error reporting feature.}} (dri=grobinson) | ||
* {{new| | * {{new|HPKP - implement pinning http header}} (dri=cviecco) | ||
* {{new|Create | * {{new| Update roadmap for Cert Revocation improvements}} (dri=rbarnes) | ||
* {{new| | * {{new| Create a mechanism to provision phones with an alternate cert}} (dri=mgoodwin) | ||
* {{new| | * {{new| Add measurement/enforcement of compliance with CABF Baseline Requirements}} (dri=keeler) | ||
* {{new| Create a tool for testing CA certificate compliance and EV-readiness}} (dri=keeler) | |||
* {{new| Add support for key wrap/unwrap and ECC in WebCrypto}} (dri=rbarnes) | |||
* {{new| [stretch goal] Enable revocation of intermediate CAs through block list service}} (dri=harsh, keeler) | |||
* {{new| [stretch goal] Require 2048-bit keys for built-in root certificates}} (dri=kathleen) | |||
* {{new| [stretch goal] Get CA Program data into one database}} (dri=kathleen) | |||