gecko-dev/security
J.C. Jones 1746417e71 Bug 1539541 - Enable FIDO U2F API, and permit registrations for Google Accounts r=keeler,qdot
Per the thread "Intent-to-Ship: Backward-Compatibility FIDO U2F support for
Google Accounts" on dev-platform [0], this bug is to:

  1. Enable the security.webauth.u2f by default, to ride the trains

  2. Remove the aOp == U2FOperation::Sign check from EvaluateAppID in
     WebAuthnUtil.cpp, permitting the Google override to work for Register as
     well as Sign.

This would enable Firefox users to use FIDO U2F API on most all sites, subject
to the algorithm limitations discussed in the section "Thorny issues in
enabling our FIDO U2F API implementation" of that post.

[0] https://groups.google.com/d/msg/mozilla.dev.platform/q5cj38hGTEA/lC834665BQAJ

Differential Revision: https://phabricator.services.mozilla.com/D25241

--HG--
extra : moz-landing-system : lando
2019-03-29 17:16:13 +00:00
..
apps bug 1525343 - increase add-on manifest size limit r=Alex_Gaynor 2019-02-12 22:01:16 +00:00
certverifier bug 1529044 - intermediate certificate caching: import on a background thread to not block certificate verification r=mgoodwin 2019-03-26 15:56:32 +00:00
ct bug 1515608 - allow end-entity certificates to be trust anchors for compatibility r=jcj 2019-03-18 20:01:02 +00:00
manager Bug 1539541 - Enable FIDO U2F API, and permit registrations for Google Accounts r=keeler,qdot 2019-03-29 17:16:13 +00:00
nss Bug 1539227 - land NSS 67c41e385581 UPGRADE_NSS_RELEASE, r=me 2019-03-26 18:48:46 +00:00
sandbox Bug 1525086 - Part 6 - Use AssertMacSandboxEnabled() for the RDD process, change the assert to use sandbox_check() r=Alex_Gaynor 2019-03-27 20:29:08 +00:00
.eslintrc.js Bug 1246594 - Enable ESLint rule no-throw-literal by default. r=Standard8 2019-03-19 22:02:42 +00:00
generate_certdata.py
generate_mapfile.py Bug 1489443 - Set GCC_USE_GNU_LD based on linker kind. r=froydnj 2018-10-17 19:46:03 +00:00
moz.build Bug 1535226 - Remove uses of XP_WIN32 in Gecko. r=glandium 2019-03-21 01:28:50 +00:00
nss.symbols Bug 1529227, Don't export NSS CMS functions not required by Firefox, r=keeler 2019-02-28 10:21:31 +01:00