Re: Draft of Whitelist and Security Guide

2014-05-19 Thread Brian LeRoux
not necessarily! unfortunately this is a part of our inherited
infrastructure that requires committer access. (to svn!)

no pull request can help w/ this. that said, spiking an email is a good
start


On Mon, May 19, 2014 at 8:08 AM, Ray Camden  wrote:

> Ok - gotcha - so you're telling me to be patient. Luckily I'm very good at
> that. ;)
>
> 
> From: brian.ler...@gmail.com  on behalf of Brian
> LeRoux 
> Sent: Monday, May 19, 2014 10:04 AM
> To: dev@cordova.apache.org
> Subject: Re: Draft of Whitelist and Security Guide
>
> no, deploying is a different thing altogether. a full rebuild of the docs
> so that is automated is forthcoming. (mike and steve are going to look at
> it when they can)
>
>
>
>
> On Mon, May 19, 2014 at 7:56 AM, Ray Camden  wrote:
>
> > Looks like it was already merged:
> >
>


Re: Draft of Whitelist and Security Guide

2014-05-19 Thread Marcel Kinard
I merged it in git and tweaked it to get the links working. I did not 
regenerate the docs on docs.cordova.io, as I have some local tooling issues 
with that. Should be visible on docs.cordova.io the next time anyone 
regenerates/publishes.

On May 19, 2014, at 10:56 AM, Ray Camden  wrote:

> Looks like it was already merged:
> 
> https://github.com/apache/cordova-docs/pull/203



RE: Draft of Whitelist and Security Guide

2014-05-19 Thread Ray Camden
Ok - gotcha - so you're telling me to be patient. Luckily I'm very good at 
that. ;)


From: brian.ler...@gmail.com  on behalf of Brian LeRoux 

Sent: Monday, May 19, 2014 10:04 AM
To: dev@cordova.apache.org
Subject: Re: Draft of Whitelist and Security Guide

no, deploying is a different thing altogether. a full rebuild of the docs
so that is automated is forthcoming. (mike and steve are going to look at
it when they can)




On Mon, May 19, 2014 at 7:56 AM, Ray Camden  wrote:

> Looks like it was already merged:
>


Re: Draft of Whitelist and Security Guide

2014-05-19 Thread Brian LeRoux
no, deploying is a different thing altogether. a full rebuild of the docs
so that is automated is forthcoming. (mike and steve are going to look at
it when they can)




On Mon, May 19, 2014 at 7:56 AM, Ray Camden  wrote:

> Looks like it was already merged:
>
> https://github.com/apache/cordova-docs/pull/203
>
> Just curious why I don't see it then? It should be up at docs.cordova.io,
> right?
>
> 
> From: brian.ler...@gmail.com  on behalf of Brian
> LeRoux 
> Sent: Monday, May 19, 2014 9:53 AM
> To: dev@cordova.apache.org
> Subject: Re: Draft of Whitelist and Security Guide
>
> err, ok, I'm not seeing if it got merged or not…can you link to it Ray?
>
>
> On Mon, May 19, 2014 at 7:43 AM, Ray Camden  wrote:
>
> > I did.
> > 
> > From: brian.ler...@gmail.com  on behalf of Brian
> > LeRoux 
> > Sent: Monday, May 19, 2014 9:41 AM
> > To: dev@cordova.apache.org
> > Subject: Re: Draft of Whitelist and Security Guide
> >
> > Did anyone submit is as a PR to the cordova-docs repo?
> >
> >
> > On Mon, May 19, 2014 at 7:21 AM, Ray Camden  wrote:
> >
> > > Speaking of - when will the GS guide be on docs.cordova.io? With 3.5?
> > >
> > > ________
> > > From: Mike Billau 
> > > Sent: Monday, May 19, 2014 8:42 AM
> > > To: dev@cordova.apache.org
> > > Subject: Re: Draft of Whitelist and Security Guide
> > >
> > > Thanks everyone for reading and looking this over. I'm going to make
> > > another pass and try to publish it this week.. .thinking about
> forwarding
> > > it to the Google Gro
> > >
> >
>


RE: Draft of Whitelist and Security Guide

2014-05-19 Thread Ray Camden
Looks like it was already merged:

https://github.com/apache/cordova-docs/pull/203

Just curious why I don't see it then? It should be up at docs.cordova.io, right?


From: brian.ler...@gmail.com  on behalf of Brian LeRoux 

Sent: Monday, May 19, 2014 9:53 AM
To: dev@cordova.apache.org
Subject: Re: Draft of Whitelist and Security Guide

err, ok, I'm not seeing if it got merged or not…can you link to it Ray?


On Mon, May 19, 2014 at 7:43 AM, Ray Camden  wrote:

> I did.
> 
> From: brian.ler...@gmail.com  on behalf of Brian
> LeRoux 
> Sent: Monday, May 19, 2014 9:41 AM
> To: dev@cordova.apache.org
> Subject: Re: Draft of Whitelist and Security Guide
>
> Did anyone submit is as a PR to the cordova-docs repo?
>
>
> On Mon, May 19, 2014 at 7:21 AM, Ray Camden  wrote:
>
> > Speaking of - when will the GS guide be on docs.cordova.io? With 3.5?
> >
> > 
> > From: Mike Billau 
> > Sent: Monday, May 19, 2014 8:42 AM
> > To: dev@cordova.apache.org
> > Subject: Re: Draft of Whitelist and Security Guide
> >
> > Thanks everyone for reading and looking this over. I'm going to make
> > another pass and try to publish it this week.. .thinking about forwarding
> > it to the Google Gro
> >
>


Re: Draft of Whitelist and Security Guide

2014-05-19 Thread Brian LeRoux
err, ok, I'm not seeing if it got merged or not…can you link to it Ray?


On Mon, May 19, 2014 at 7:43 AM, Ray Camden  wrote:

> I did.
> 
> From: brian.ler...@gmail.com  on behalf of Brian
> LeRoux 
> Sent: Monday, May 19, 2014 9:41 AM
> To: dev@cordova.apache.org
> Subject: Re: Draft of Whitelist and Security Guide
>
> Did anyone submit is as a PR to the cordova-docs repo?
>
>
> On Mon, May 19, 2014 at 7:21 AM, Ray Camden  wrote:
>
> > Speaking of - when will the GS guide be on docs.cordova.io? With 3.5?
> >
> > 
> > From: Mike Billau 
> > Sent: Monday, May 19, 2014 8:42 AM
> > To: dev@cordova.apache.org
> > Subject: Re: Draft of Whitelist and Security Guide
> >
> > Thanks everyone for reading and looking this over. I'm going to make
> > another pass and try to publish it this week.. .thinking about forwarding
> > it to the Google Gro
> >
>


RE: Draft of Whitelist and Security Guide

2014-05-19 Thread Ray Camden
I did.

From: brian.ler...@gmail.com  on behalf of Brian LeRoux 

Sent: Monday, May 19, 2014 9:41 AM
To: dev@cordova.apache.org
Subject: Re: Draft of Whitelist and Security Guide

Did anyone submit is as a PR to the cordova-docs repo?


On Mon, May 19, 2014 at 7:21 AM, Ray Camden  wrote:

> Speaking of - when will the GS guide be on docs.cordova.io? With 3.5?
>
> 
> From: Mike Billau 
> Sent: Monday, May 19, 2014 8:42 AM
> To: dev@cordova.apache.org
> Subject: Re: Draft of Whitelist and Security Guide
>
> Thanks everyone for reading and looking this over. I'm going to make
> another pass and try to publish it this week.. .thinking about forwarding
> it to the Google Gro
>


Re: Draft of Whitelist and Security Guide

2014-05-19 Thread Brian LeRoux
Did anyone submit is as a PR to the cordova-docs repo?


On Mon, May 19, 2014 at 7:21 AM, Ray Camden  wrote:

> Speaking of - when will the GS guide be on docs.cordova.io? With 3.5?
>
> 
> From: Mike Billau 
> Sent: Monday, May 19, 2014 8:42 AM
> To: dev@cordova.apache.org
> Subject: Re: Draft of Whitelist and Security Guide
>
> Thanks everyone for reading and looking this over. I'm going to make
> another pass and try to publish it this week.. .thinking about forwarding
> it to the Google Gro
>


RE: Draft of Whitelist and Security Guide

2014-05-19 Thread Ray Camden
Speaking of - when will the GS guide be on docs.cordova.io? With 3.5?


From: Mike Billau 
Sent: Monday, May 19, 2014 8:42 AM
To: dev@cordova.apache.org
Subject: Re: Draft of Whitelist and Security Guide

Thanks everyone for reading and looking this over. I'm going to make
another pass and try to publish it this week.. .thinking about forwarding
it to the Google Gro

Re: Draft of Whitelist and Security Guide

2014-05-19 Thread Mike Billau
Thanks everyone for reading and looking this over. I'm going to make
another pass and try to publish it this week.. .thinking about forwarding
it to the Google Group and soliciting feedback from some users.


On Fri, May 16, 2014 at 6:34 PM, Tommy Williams  wrote:

> Well written and succinct (though personally depressing, heh).
>
> Thanks for this.
> On 17 May 2014 02:46, "Marcel Kinard"  wrote:
>
> > I just added the verbage for the Certificate Pinning and Self-Signed
> Certs
> > sections.
> >
> > On May 6, 2014, at 1:02 PM, Mike Billau  wrote:
> >
> > >
> >
> https://docs.google.com/document/d/13C6ZUZiqP83MQX0MvFlyVUZef-nT4cJwyd-qSvXLkK4/edit#
> >
> >
>


Re: Draft of Whitelist and Security Guide

2014-05-16 Thread Tommy Williams
Well written and succinct (though personally depressing, heh).

Thanks for this.
On 17 May 2014 02:46, "Marcel Kinard"  wrote:

> I just added the verbage for the Certificate Pinning and Self-Signed Certs
> sections.
>
> On May 6, 2014, at 1:02 PM, Mike Billau  wrote:
>
> >
> https://docs.google.com/document/d/13C6ZUZiqP83MQX0MvFlyVUZef-nT4cJwyd-qSvXLkK4/edit#
>
>


Re: Draft of Whitelist and Security Guide

2014-05-11 Thread Marcel Kinard
I just added the verbage for the Certificate Pinning and Self-Signed Certs 
sections.

On May 6, 2014, at 1:02 PM, Mike Billau  wrote:

> https://docs.google.com/document/d/13C6ZUZiqP83MQX0MvFlyVUZef-nT4cJwyd-qSvXLkK4/edit#



Re: Draft of Whitelist and Security Guide

2014-05-06 Thread Shazron
Thanks Mike, will look it over.

Regarding: https://issues.apache.org/jira/browse/CB-2179
How do we warn, is that just a doc issue or something in console.log?

There is a related issue: https://issues.apache.org/jira/browse/CB-5028 (I
was thinking an event that they can listen to, not sure)


On Tue, May 6, 2014 at 10:02 AM, Mike Billau  wrote:

> Hi everyone,
>
> After Ray's great work on the Next Steps article, I decided to finally
> start the Whitlist and Security Guide doc, located here:
>
>
> https://docs.google.com/document/d/13C6ZUZiqP83MQX0MvFlyVUZef-nT4cJwyd-qSvXLkK4/edit#
>
> This is an attempt to resolve CB-2179 and CB-5786, and will also be a good
> secondary place to put any security announcements, like those issues we had
> a few months ago.
>
> Please look it over, feel free to leave comments and suggestions. I will
> continue to iterate on it. I think for now it can be a standalone guide,
> but we might want to think about folding it into the Whitelist doc.
>
> Thanks,
> Mike
>


Draft of Whitelist and Security Guide

2014-05-06 Thread Mike Billau
Hi everyone,

After Ray's great work on the Next Steps article, I decided to finally
start the Whitlist and Security Guide doc, located here:

https://docs.google.com/document/d/13C6ZUZiqP83MQX0MvFlyVUZef-nT4cJwyd-qSvXLkK4/edit#

This is an attempt to resolve CB-2179 and CB-5786, and will also be a good
secondary place to put any security announcements, like those issues we had
a few months ago.

Please look it over, feel free to leave comments and suggestions. I will
continue to iterate on it. I think for now it can be a standalone guide,
but we might want to think about folding it into the Whitelist doc.

Thanks,
Mike