Re: State synchronization - use cases?

2015-06-26 Thread Kyle Huey
On Fri, Jun 26, 2015 at 10:38 AM, Richard Barnes rbar...@mozilla.com wrote: Hey dev.platform folks, Some of us in the security engineering group have been chatting with cloud services about making an improved way to maintain state in the browser. Our use cases are things like: - Revoked

State synchronization - use cases?

2015-06-26 Thread Richard Barnes
Hey dev.platform folks, Some of us in the security engineering group have been chatting with cloud services about making an improved way to maintain state in the browser. Our use cases are things like: - Revoked certificates (OneCRL) - HSTS / HPKP preloads We're trying to get an idea of how big

Re: State synchronization - use cases?

2015-06-26 Thread Dave Townsend
The blocklist service also downloads about once a day On Fri, Jun 26, 2015 at 10:49 AM, Anne van Kesteren ann...@annevk.nl wrote: On Fri, Jun 26, 2015 at 10:38 AM, Richard Barnes rbar...@mozilla.com wrote: If anyone has use cases in addition to the above, please let me know. Public suffix?

Re: State synchronization - use cases?

2015-06-26 Thread Anne van Kesteren
On Fri, Jun 26, 2015 at 10:38 AM, Richard Barnes rbar...@mozilla.com wrote: If anyone has use cases in addition to the above, please let me know. Public suffix? Getting that updated more frequently would be good. Especially now sites like GitHub can use it to silo user data. --

Re: State synchronization - use cases?

2015-06-26 Thread Benjamin Kelly
Tracking protection exceptions. I wrote a bug for this last night: https://bugzilla.mozilla.org/show_bug.cgi?id=1177641 On Fri, Jun 26, 2015 at 11:22 AM, Kyle Huey m...@kylehuey.com wrote: On Fri, Jun 26, 2015 at 10:38 AM, Richard Barnes rbar...@mozilla.com wrote: Hey dev.platform

Re: State synchronization - use cases?

2015-06-26 Thread Chris Peterson
- gfx's GPU blocklist? - Shumway's SWF whitelist On 6/26/15 10:38 AM, Richard Barnes wrote: Hey dev.platform folks, Some of us in the security engineering group have been chatting with cloud services about making an improved way to maintain state in the browser. Our use cases are things

Re: State synchronization - use cases?

2015-06-26 Thread Gervase Markham
At last! Hallelujah! :-) On 26/06/15 10:38, Richard Barnes wrote: 1. You want every browser to have the same set of data 2. The data change relatively slowly (we are aiming for ~24hr deliveries) If anyone has use cases in addition to the above, please let me know. * The Public Suffix List.

Re: State synchronization - use cases?

2015-06-26 Thread Richard Barnes
Yes; that is what we currently use for OneCRL. The idea here is to make something that's more generic, in order to more easily support pushing new types of data. That said, I suppose we could envision moving the add on block list to this service if it happens. But that might not be a priority,