Closed Bug 1500024 Opened 6 years ago Closed 6 years ago

Security testing for Device Pairing (Android device to Desktop)

Categories

(Firefox Graveyard :: Security: Review Requests, enhancement)

enhancement
Not set
normal

Tracking

(Not tracked)

RESOLVED INCOMPLETE

People

(Reporter: arroway, Unassigned)

References

Details

(Whiteboard: audit)

We got a request for testing device pairing through integration with the FxA Authentication component.

Code repository: ttps://github.com/mozilla-services/channelserver
Bug: https://bugzilla.mozilla.org/show_bug.cgi?id=1490671 [Device Pairing] Desktop Auth

Proposal: https://docs.google.com/document/d/1_n8IQa7YBymnUE87sYORzc7j-zPwHt9EhOP7RQ1aJ5I/edit
FxA UX flow: https://www.lucidchart.com/documents/edit/7bcd8869-0d90-443c-aa22-81262cef7e4d/0
Whiteboard: testing
Flags: needinfo?(ptheriault)
Assignee: nobody → stephouillon
Flags: needinfo?(ptheriault)
Just update, the development team is going through some crypto feedback from Sec Eng (Thyla & mt) and expecting further updates, so this isn't ready for testing yet. Moving to backlog.
Status: NEW → UNCONFIRMED
Ever confirmed: false
Assignee: stephouillon → nobody
Not tied to a specific release, moving to audit queue.
Whiteboard: testing → audit
Actually Im going to close this for now, and reopen/create a new bug when this is ready for security testing.
Status: UNCONFIRMED → RESOLVED
Closed: 6 years ago
Resolution: --- → INCOMPLETE
Product: Firefox → Firefox Graveyard
You need to log in before you can comment on or make changes to this bug.