Re: Intent to Ship: Web Authentication

2017-12-06 Thread J.C. Jones
On Wed, Dec 6, 2017 at 10:24 AM, James Graham wrote: > Are the web-platform-tests going to be done before we ship? > I hope so, though as-of-now no one from Mozilla is contributing to the web-platform-tests [1]. Originally some FIDO Alliance-associated folk were going to take the lead on them, b

Re: Intent to ship WebRTC RTCRtpReceiver contributing and synchronization sources

2017-12-06 Thread Nico Grunbaum
Thank you for the link to the template Boris. Intent to ship WebRTC RTCRtpReceiver contributing and synchronization sources Summary: RTCRtpReceiver's[1] getSynchronizationSources() method allows WebRTC applications to monitor volume levels of call participants without having to use the costl

Re: Firefox build issues with Rust and the new VS2017 15.5 update

2017-12-06 Thread Adam Gashlin
I encountered an issue building with the latest VS update, warnings treated as errors regarding TR1 deprecation, in at least some gtest files. This can be avoided by running as CXXFLAGS=-D_SILENCE_TR1_NAMESPACE_DEPRECATION_WARNING ./mach build though I imagine there are better ways of adding in t

Re: Intent to ship: Do not allow a http-auth prompt requested by an image resource loaded from a cross-origin

2017-12-06 Thread Daniel Veditz
On Wed, Dec 6, 2017 at 9:13 AM, Dragana Damjanovic wrote: > Bug 1423522 should fix this. > ​That doesn't fix it, that reenables the phishing risk. There's no reason the phisher's server can't pretend to be a proxy if that's what it takes to get a spoofy auth prompt to show up on a discussion boa

Re: Intent to Ship: Web Authentication

2017-12-06 Thread James Graham
On 05/12/17 20:44, J.C. Jones wrote: Summary: Support public key cryptographic authentication devices through Web Authentication. This sounds pretty cool! Testing: Mochitests in-tree; https://webauthn.io/; https://webauthn.bin.coffee/ ; Web Platform Tests in-progress Are the web-platform-te

Re: Intent to ship: Do not allow a http-auth prompt requested by an image resource loaded from a cross-origin

2017-12-06 Thread Dragana Damjanovic
Bug 1423522 should fix this. dragana On Wed, Dec 6, 2017 at 5:53 PM, Daniel Veditz wrote: > On Tue, Dec 5, 2017 at 1:29 PM, Xidorn Quan wrote: > > > Would this affect authentication from proxy? For example, if the > > cross-origin image is on a domain which PAC decides to use proxy for, > > an

Re: Intent to ship: Do not allow a http-auth prompt requested by an image resource loaded from a cross-origin

2017-12-06 Thread Daniel Veditz
On Tue, Dec 5, 2017 at 1:29 PM, Xidorn Quan wrote: > Would this affect authentication from proxy? For example, if the > cross-origin image is on a domain which PAC decides to use proxy for, > and the proxy requires authentication, would the dialog prompt for it be > suppressed as well? If so, it

Re: Intent to Ship: Web Authentication

2017-12-06 Thread Jonathan Watt
This is really awesome and a significant advance on other 2FA solutions. I've been looking forward to us shipping this. Thank you for all your hard work! On 05/12/2017 20:44, J.C. Jones wrote: > Summary: Support public key cryptographic authentication devices > through Web Authentication. > > Web

Re: Intent to ship WebRTC RTCRtpReceiver contributing and synchronization sources

2017-12-06 Thread Boris Zbarsky
On 12/6/17 12:19 AM, Nico Grunbaum wrote: We intend to ship these interfaces in 59, and they are on nightly now. Tracking: https://bugzilla.mozilla.org/show_bug.cgi?id=1363667 [1] https://w3c.github.io/webrtc-pc/#dom-rtcrtpreceiver [2] https://w3c.github.io/webrtc-pc/#dom-rtcrtpreceiver-getstat

Re: Intent to ship: Do not allow a http-auth prompt requested by an image resource loaded from a cross-origin

2017-12-06 Thread Dragana Damjanovic
On Tue, Dec 5, 2017 at 10:29 PM, Xidorn Quan wrote: > On Wed, Dec 6, 2017, at 01:25 AM, Dragana Damjanovic wrote: > > Hi all, > > > > We have implemented this for a log time, but the pref was turned off. > > I intend to switch on the pref for this in bug 1423146. > > After the pref is switched a