1073668 - Update TLS/SSL documentation

Status: RESOLVED WONTFIX

(Developer Documentation Graveyard :: Protocols, defect, P5)

Description

[Eric Shepherd [:sheppy]]

:: Developer Documentation Request

      Request Type: Correction
     Gecko Version: unspecified
 Technical Contact: 

:: Details

We have various pages that discuss SSL, such as https://developer.mozilla.org/en-US/docs/Introduction_to_SSL, the NSS documentation, and then docs related to HTTPS. These pages need to be reviewed and updated as needed given that service workers will require TLS.

annevk also suggests that we may want to start referring to it as TLS (HTTPS). Covering TLS and HSTS at least would help be ready for service workers.

Comment 1

[Eric Shepherd [:sheppy]]

See also https://wiki.whatwg.org/wiki/TLS

Comment 2

[Julien Vehent]

OpSec maintains TLS guidelines on wikimo: https://wiki.mozilla.org/Security/Server_Side_TLS
We usually store our docs on mana for internal pages, and wikimo for public pages.
What is the difference between wikimo and mdn for such pages? I don't have a preference as to where it should be published, as long as it is in a single location.

Comment 3

[Eric Shepherd [:sheppy]]

MDN is where we document any developer documentation that's Web-facing. That should, IMO, include TLS. So this should migrate over.

Comment 4

[Eric Shepherd [:sheppy]]

(In reply to Julien Vehent [:ulfr] {use needinfo} from comment #2)
> OpSec maintains TLS guidelines on wikimo:
> https://wiki.mozilla.org/Security/Server_Side_TLS
> We usually store our docs on mana for internal pages, and wikimo for public
> pages.
> What is the difference between wikimo and mdn for such pages? I don't have a
> preference as to where it should be published, as long as it is in a single
> location.

Any chance we can get some help moving those docs over to MDN? That's where we keep developer documentation for technologies that developers can take advantage of (where "developers" include Web devs, add-don devs, and Firefox devs).

Comment 5

[Julien Vehent]

My only issue is that the current location is very well-known. That page became one of the most referenced doc among sysadmins and security people to configure TLS servers. Moving it over to MDN will break the referencing, so at the moment I don't think it's worth moving it over to MDN.

Comment 6

[Jean-Yves Perrier [:teoli]]

Let's close this then. No point in migrating this.

Comment 7

[Anne (:annevk)]

teoli, what about comment 0 is addressed though?