Security/Meetings/Automation/2014-11-18

Agenda

• status updates

https://letsencrypt.org/

Status Updates

• jeff
  • Webinar wtih ES/Cisco went well
  • Protecting Admin hosts with an automated blocklist starts this week
  • Next is the SQS link to AWS
• ulfr
  • api pgp authorization is live

   http://mig.mozilla.org/doc/api.rst.html#authentication-with-x-pgpauthorization-version-1

• • standalone install script, working and ugly!

   https://github.com/mozilla/mig/blob/master/doc/.files/standalone_install.sh

• • mig-console target pre-eval before launch, uses somewhat fancy readonly db role
• psiinon
  • speeding up ZAP startup process !
  • Just seen this :) http://googleonlinesecurity.blogspot.ch/2014/11/ready-aim-fire-open-source-tool-to-test.html
  • https://public-firing-range.appspot.com/
  • scan policy mgmt _nearly_ done
  • spider limit by siblings
  • TODO with mgoodwin - get pnh in FX Dev