Re: State synchronization - use cases?
On Fri, Jun 26, 2015 at 10:38 AM, Richard Barnes rbar...@mozilla.com wrote: Hey dev.platform folks, Some of us in the security engineering group have been chatting with cloud services about making an improved way to maintain state in the browser. Our use cases are things like: - Revoked certificates (OneCRL) - HSTS / HPKP preloads We're trying to get an idea of how big a data set we might want to maintain, so I wanted to see if anyone else had use cases that might benefit from such a mechanism. The critical properties for your data set to be suitable are: 1. You want every browser to have the same set of data 2. The data change relatively slowly (we are aiming for ~24hr deliveries) If anyone has use cases in addition to the above, please let me know. Thanks a lot, --Richar ___ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform UA overrides? - Kyle ___ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform
State synchronization - use cases?
Hey dev.platform folks, Some of us in the security engineering group have been chatting with cloud services about making an improved way to maintain state in the browser. Our use cases are things like: - Revoked certificates (OneCRL) - HSTS / HPKP preloads We're trying to get an idea of how big a data set we might want to maintain, so I wanted to see if anyone else had use cases that might benefit from such a mechanism. The critical properties for your data set to be suitable are: 1. You want every browser to have the same set of data 2. The data change relatively slowly (we are aiming for ~24hr deliveries) If anyone has use cases in addition to the above, please let me know. Thanks a lot, --Richar ___ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform
Re: State synchronization - use cases?
The blocklist service also downloads about once a day On Fri, Jun 26, 2015 at 10:49 AM, Anne van Kesteren ann...@annevk.nl wrote: On Fri, Jun 26, 2015 at 10:38 AM, Richard Barnes rbar...@mozilla.com wrote: If anyone has use cases in addition to the above, please let me know. Public suffix? Getting that updated more frequently would be good. Especially now sites like GitHub can use it to silo user data. -- https://annevankesteren.nl/ ___ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform ___ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform
Re: State synchronization - use cases?
On Fri, Jun 26, 2015 at 10:38 AM, Richard Barnes rbar...@mozilla.com wrote: If anyone has use cases in addition to the above, please let me know. Public suffix? Getting that updated more frequently would be good. Especially now sites like GitHub can use it to silo user data. -- https://annevankesteren.nl/ ___ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform
Re: State synchronization - use cases?
Tracking protection exceptions. I wrote a bug for this last night: https://bugzilla.mozilla.org/show_bug.cgi?id=1177641 On Fri, Jun 26, 2015 at 11:22 AM, Kyle Huey m...@kylehuey.com wrote: On Fri, Jun 26, 2015 at 10:38 AM, Richard Barnes rbar...@mozilla.com wrote: Hey dev.platform folks, Some of us in the security engineering group have been chatting with cloud services about making an improved way to maintain state in the browser. Our use cases are things like: - Revoked certificates (OneCRL) - HSTS / HPKP preloads We're trying to get an idea of how big a data set we might want to maintain, so I wanted to see if anyone else had use cases that might benefit from such a mechanism. The critical properties for your data set to be suitable are: 1. You want every browser to have the same set of data 2. The data change relatively slowly (we are aiming for ~24hr deliveries) If anyone has use cases in addition to the above, please let me know. Thanks a lot, --Richar ___ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform UA overrides? - Kyle ___ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform ___ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform
Re: State synchronization - use cases?
- gfx's GPU blocklist? - Shumway's SWF whitelist On 6/26/15 10:38 AM, Richard Barnes wrote: Hey dev.platform folks, Some of us in the security engineering group have been chatting with cloud services about making an improved way to maintain state in the browser. Our use cases are things like: - Revoked certificates (OneCRL) - HSTS / HPKP preloads We're trying to get an idea of how big a data set we might want to maintain, so I wanted to see if anyone else had use cases that might benefit from such a mechanism. The critical properties for your data set to be suitable are: 1. You want every browser to have the same set of data 2. The data change relatively slowly (we are aiming for ~24hr deliveries) If anyone has use cases in addition to the above, please let me know. Thanks a lot, --Richar ___ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform
Re: State synchronization - use cases?
At last! Hallelujah! :-) On 26/06/15 10:38, Richard Barnes wrote: 1. You want every browser to have the same set of data 2. The data change relatively slowly (we are aiming for ~24hr deliveries) If anyone has use cases in addition to the above, please let me know. * The Public Suffix List. * User Agent overrides. Gerv ___ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform
Re: State synchronization - use cases?
Yes; that is what we currently use for OneCRL. The idea here is to make something that's more generic, in order to more easily support pushing new types of data. That said, I suppose we could envision moving the add on block list to this service if it happens. But that might not be a priority, because it already exists. Sent from my iPhone. Please excuse brevity. On Jun 26, 2015, at 10:56, Dave Townsend dtowns...@mozilla.com wrote: The blocklist service also downloads about once a day On Fri, Jun 26, 2015 at 10:49 AM, Anne van Kesteren ann...@annevk.nl wrote: On Fri, Jun 26, 2015 at 10:38 AM, Richard Barnes rbar...@mozilla.com wrote: If anyone has use cases in addition to the above, please let me know. Public suffix? Getting that updated more frequently would be good. Especially now sites like GitHub can use it to silo user data. -- https://annevankesteren.nl/ ___ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform ___ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform ___ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform
