749355 - SecReview: WebContacts (or Contacts+)

Status: RESOLVED INVALID

(mozilla.org :: Security Assurance: Review Request, task, P1)

Description

[Curtis Koenig [:curtisk-use curtis.koenig+bzATgmail.com]]]

1. Who is/are the point of contact(s) for this review?
2. Please provide a short description of the feature / application (e.g. problem solved, use cases, etc.):
3. Please provide links to additional information (e.g. feature page, wiki) if available and not yet included in feature description:
4. Does this request block another bug? If so, please indicate the bug number
5. This review will be scheduled amongst other requested reviews. What is the urgency or needed completion date of this review?
6. Please answer the following few questions: (Note: If you are asked to describe anything, 1-2 sentences shall suffice.)
6a. Does this feature or code change affect Firefox, Thunderbird or any product or service the Mozilla ships to end users?
6b. Are there any portions of the project that interact with 3rd party services?
6c. Will your application/service collect user data? If so, please describe 
7. If you feel something is missing here or you would like to provide other kind of feedback, feel free to do so here (no limits on size):
8. Desired Date of review (if known from https://mail.mozilla.com/home/[e-mail]/Security%20Review.html) and whom to invite.

Comment 2

[Curtis Koenig [:curtisk-use curtis.koenig+bzATgmail.com]]]

I see the blocked bug is resolved, do we need to get this one scheduled?

Comment 3

[Paul Theriault [:pauljt] (no longer reading bugmail)]

Yes we do. Note that this is just another b2g API, and as with all of the development is ongoing.

Comment 4

[Paul Theriault [:pauljt] (no longer reading bugmail)]

Actually this was scheduled for monday 30 july - do you know if it happened (I was on leave). There are some notes here but they dont look complete: https://etherpad.mozilla.org/contactsapisecreview

Comment 5

[Curtis Koenig [:curtisk-use curtis.koenig+bzATgmail.com]]]

I don't see this ever being on the secreview calendar and I see not contacts item in https://wiki.mozilla.org/Category:SecReview.
The only editors on that etherpad are you and dchan so afaik this has never been reviewed in a team fashion.

Comment 6

[Paul Theriault [:pauljt] (no longer reading bugmail)]

Ok well sounds like maybe it didnt happen, and it definately does need to happen, so we should schedule asap.

Comment 7

[Paul Theriault [:pauljt] (no longer reading bugmail)]

Mozcontacts is going away.