J.C. Jones

Results 62 comments of J.C. Jones

We'll want to prime a dictionary if we're doing this. To do that, we'd probably want to iterate through the prod and stage OCSP resposnes with a tool to find...

Both are possible. In degenerate cases where the logserver is having a hiccup, rsyslog consumes pretty considerable amounts of RAM in its queuing, and getting the resource management for that...

I am going to open a ticket in the Epic to figure this out, and I'm fine with closing this one No Action.

Just to toss one more out there, since we want a histogram anyway for compliance monitoring. This is certainly more complex than Solution 1, but it doesn't rely on the...

Or it could be the issuer ID.

> which Firefox/PC may support, but Firefox/Android does not?) Correct, there's no Android API for U2F in browsers, so Firefox could not implement it.

> but chrome on android does iirc I thought android has u2f support It does, but it is not exposed for even allowlisted browser applications to access, only Chrome. (Source:...

Relevant topic re: Push and user interaction - https://blog.mozilla.org/futurereleases/2019/11/04/restricting-notification-permission-prompts-in-firefox/

Absent a threat that indicates this need, I think this is reasonable to close for now, for re-opening in some future time when we have better understanding of adversarial use,...

Putting another hole in the same-origin policy with a new facet-like mechanism isn't necessary for the consumer example; our permissions issue in #1336 aside, the iframe mechanisms are or will...