Security/Meetings/Automation/2014-01-07
From MozillaWiki
< Security | Meetings | Automation
Agenda
- status updates
- discussions
- Minion: Firefox can't establish a connection to the server at minion-dev.mozillalabs.com.
- A word about bettercrypto.org
http://code.google.com/p/zaproxy/source/browse/trunk/src/org/parosproxy/paros/security/SslCertificateServiceImpl.java#85 https://www.bouncycastle.org/wiki/display/JA1/Provider+Installation
Status Updates
- freddyb
- none
- psiinon
- ZAP : ToolsWatch security tool of the year 2013: http://www.toolswatch.org/2013/12/2013-top-security-tools-as-voted-by-toolswatch-org-readers/
- ZAP: Non 'std' web apps (single page, unusual separators)
- ZAP: cmdline quick scan
- ZAP: 2.3 .. soonish ..
- mgoodwin
- none
- ulfr
- Action signature support for PGP ! \o/ https://dpaste-bkero.paas.allizom.org/ktt8
- Scheduler improvements
- proper error handling: each function uses panic internally, with a defer block that transform the panic into an error, and eventually logs
- syslog, log levels, asynchronous logging into LOG channel, and mig.LOG type
- configuration file, loaded into global Context, accessible to all functions
- Context initialization, with connection to database, broker, creation of channels and other wonders is handled in context.go
- split of the scheduler code into several files, more work to do on that front, particularly for the management of the Flow in flow.go
- Action and Command are split out in their own files, with specific methods
- dchan
- no update