Closed Bug 1153420 (nsec-signing) Opened 10 years ago Closed 8 years ago

[META] Tracking bug for Signing implementation of New Security Model

Categories

(Firefox OS Graveyard :: General, defect, P1)

Product:
Firefox OS Graveyard
Component:
General
Platform:
x86
macOS
Type:
defect

Tracking

(Not tracked)

Status:
RESOLVED WONTFIX

People

(Reporter: jgong, Unassigned)

References

(Depends on 1 open bug)

Details

(Whiteboard: [newsecurity])

User Story

This is a V3 initiative for a New Security Model.  https://wiki.mozilla.org/FirefoxOS/New_security_model

This Meta Bug is for tracking the "Signing" implementation, a sub-component of the bigger New Security Model project. https://wiki.mozilla.org/FirefoxOS/New_security_model#Signing

*****
Signing

We will require that all content which uses "sensitive APIs" is signed. For now only the firefox marketplace will be allowed to do the signing. Possibly this will be changed in the future, but that's likely more a policy change than a code change.

Signing is done by having the developer package the content into a package and submit it to the mozilla marketplace. The marketplace will review the app and then add a signature to the package. The developer can then download the signed package and upload to the developer's website.
This is a V3 initiative for a New Security Model. https://wiki.mozilla.org/FirefoxOS/New_security_model This Meta Bug is for tracking the "Signing" implementation, a sub-component of the bigger New Security Model project. https://wiki.mozilla.org/FirefoxOS/New_security_model#Signing
Whiteboard: [NewSecurity]
User Story: (updated)
Blocks: nsec-verify
Blocks: nsec-csp
No longer blocks: nsec-verify, nsec-csp
User Story: (updated)
Blocks: 1153421, nsec-verify
Depends on: nsec-csp
No longer blocks: 1153421
No longer depends on: nsec-csp
Blocks: nsec-isolation
No longer blocks: nsec-isolation
Blocks: nsec-sw
No longer blocks: nsec-sw
Blocks: nsec
No longer blocks: nsec-verify
Blocks: nsec-verify
No longer blocks: nsec-verify
Depends on: nsec-csp, nsec-isolation, nsec-installing, nsec-sw, nsec-origins, nsec-verify
Blocks: nsec-origins
No longer depends on: nsec-origins
Blocks: nsec-verify
No longer depends on: nsec-verify
No longer blocks: nsec-verify, nsec-origins
Depends on: nsec-verify, nsec-origins
Blocks: nsec-isolation
No longer depends on: nsec-isolation
Blocks: nsec-sw
No longer depends on: nsec-sw
Blocks: nsec-csp
No longer depends on: nsec-csp
Blocks: nsec-installing
No longer depends on: nsec-installing
Blocks: nsec-verify
No longer depends on: nsec-verify
Blocks: nsec-csp
No longer depends on: nsec-csp
Blocks: 1153449
Whiteboard: [NewSecurity] → [newsecurity]
Priority: -- → P1
blocking-b2g: --- → 2.5+
Depends on: 1215408
Depends on: 1216469
Depends on: 1218630
Depends on: 1218713
Depends on: 1218757
Depends on: 1220025
Depends on: 1224084
Depends on: 1227872
Depends on: 1228310
Component: Security → General
Product: Firefox → Firefox OS
Status: NEW → RESOLVED
Closed: 8 years ago
Resolution: --- → WONTFIX
You need to log in before you can comment on or make changes to this bug.