Closed Bug 1013946 Opened 6 years ago Closed 2 years ago

FindMyDevice should use HTTPS cert pinning

Categories

(Firefox OS Graveyard :: FindMyDevice, defect)

defect
Not set

Tracking

(Not tracked)

RESOLVED WONTFIX

People

(Reporter: freddyb, Unassigned)

References

Details

(Keywords: sec-want, Whiteboard: server 2.1;)

Once we have certificate proper pinning in Firefox (quite soon!), I'd love to have a pin for the domain as well as it exposes some very very sensitive features.
since bug 1013944 covers "it should use HTTPS" this one is really a feature request for cert-pinning. More of a feature request than something that needs to be hidden but since it reveals the other bug we'll leave it hidden for now.
Keywords: sec-want
Summary: FindMyDevice should use HTTPS and cert pinning → FindMyDevice should use HTTPS cert pinning
Group: b2g-core-security → core-security
Whiteboard: server 2.1;
Group: core-security → b2g-core-security
Firefox OS is not being worked on
Status: NEW → RESOLVED
Closed: 2 years ago
Resolution: --- → WONTFIX
Group: b2g-core-security
You need to log in before you can comment on or make changes to this bug.