the wild web

I'll be giving a talk at the October 13 Stanford Security Seminar . 4:30pm in Gates 4B. Show up if you're interested in CSP or wan...

Brandon Sterne and I released a preview of Firefox with Content Security Policy features built in. There are still little bits of the spe...

While discussing privacy and Firefox 3.5 with Chris a couple weeks ago, we stumbled upon the thought that people might want to be able to s...

A while back, Collin Jackson and Adam Barth presented this idea called ForceHTTPS . The main idea was simple, yet powerful: allow sites a w...

I've been working on an Add-On for Firefox 3.* recently, and came across a situation where I wanted to do a little XPCOM component inher...

We're working up a storm on Content Security Policy (CSP) here at Mozilla , and I've been spending a lot of time hacking out an impl...

In working on a project recently, I found myself wanting to become an EV-SSL certificate authority ( EV means Extended Validation ). Lofty ...

Last week at CanSecWest, Alex Sotirov and Mike Zusman showed how extended validity (EV) certificates don't really provide much additiona...