Closed Bug 1013946 Opened 10 years ago Closed 6 years ago

FindMyDevice should use HTTPS cert pinning

Categories

(Firefox OS Graveyard :: FindMyDevice, defect)

Product:
Firefox OS Graveyard
Component:
FindMyDevice
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED WONTFIX

People

(Reporter: freddy, Unassigned)

References

Details

(Keywords: sec-want, Whiteboard: server 2.1;)

Attachments

(1 obsolete file) 

Once we have certificate proper pinning in Firefox (quite soon!), I'd love to have a pin for the domain as well as it exposes some very very sensitive features.
since bug 1013944 covers "it should use HTTPS" this one is really a feature request for cert-pinning. More of a feature request than something that needs to be hidden but since it reveals the other bug we'll leave it hidden for now.
Keywords: sec-want
Summary: FindMyDevice should use HTTPS and cert pinning → FindMyDevice should use HTTPS cert pinning
Group: b2g-core-security → core-security
Whiteboard: server 2.1;
Group: core-security → b2g-core-security
Firefox OS is not being worked on
Status: NEW → RESOLVED
Closed: 6 years ago
Resolution: --- → WONTFIX
Group: b2g-core-security
Assignee: nobody → riasangwan1999

Comment on attachment 9247919 [details]
Bug 1013946 - Remove legacy signons.sqlite files and references. r?mak

Revision D129598 was moved to bug 1013945. Setting attachment 9247919 [details] to obsolete.

Attachment #9247919 - Attachment is obsolete: true
Assignee: riasangwan1999 → nobody
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: