920246 - Privacy-Technical Review: TogetherJS

Status: RESOLVED FIXED

(mozilla.org :: Security Assurance: Review Request, task)

Description

[Ian Bicking (:ianbicking)]

Initial Questions:

Project/Feature Name: TogetherJS
Tracking  ID:
Description:
TogetherJS is a service and library for adding real-time collaboration to a website.

The service/server portion is a server that accepts WebSocket connections, and echos those messages between the participants in a session.  Only aggregated usage statistics are saved, everything else is memory-only.

The client library runs on the website (in content) and introspects the page and communicates with everyone else in the session about certain actions that the user takes.
Additional Information:
Site: https://togetherjs.com/
Github: https://github.com/mozilla/togetherjs
Server: https://github.com/mozilla/togetherjs/blob/develop/hub/server.js
JP is handling the ops/deployment: [e-mail] (it is deployed on AWS)

Key Initiative: Labs / Research / H3
Release Date: Continuous releases
Project Status: launched
Mozilla Data: Yes
Mozilla Related: 
Separate Party: No

Comment 1

[Curtis Koenig [:curtisk-use curtis.koenig+bzATgmail.com]]]

The wiki form to gather and do the technical privacy review are here:
https://wiki.mozilla.org/Privacy/Reviews/TogetherJS

Please provide the base information for contacts in the "Document Overview" and then fill out the "Architecture" section, the rest will be done by myself and other privacy reviewers.

For an idea of what this should look like take a look at:
https://wiki.mozilla.org/Privacy/Reviews/ThunderbirdBigFiles

If you have other questions about how to proceed with this information let me know.

Comment 2

[Ian Bicking (:ianbicking)]

I've completed my portion of the wiki page.

Comment 3

[Curtis Koenig [:curtisk-use curtis.koenig+bzATgmail.com]]]

SecReview Notes https://wiki.mozilla.org/Security/Reviews/TogetherJS
Privacy Review Wiki: https://wiki.mozilla.org/Privacy/Reviews/TogetherJS