Sponsor P

Timeline

31 October 2013 - 31 October 2014

Deliverables

The Contractor will further develop the Tor Browser Bundle, the primary tool used to browse the Internet safely and anonymously. The efforts of this contract will increase safety of its users by deploying new security and usability improvements.

• Tor Browser Patches
  • Secure Update
  • Mozilla Persona
  • API Development
  • Merging and Maintenance
• Tor Browser Extension Dev
  • Usability Improvements
  • PT Config
  • HTTPS Everywhere Dev
• Build Security
  • Future Work

Goals for Firefox 24ESR series

1. Unified Pluggable Transport bundles with UI configuration - #9444 (closed) and #10418 (moved)
2. Port Tor Launcher to Thunderbird and other Mozilla platforms - #11076 (moved)
3. Improve Windows and OSX dock behavior - #9173 (closed) and #11641 (closed)
4. Deploy an alpha with the Firefox Updater - #4234 (moved)
5. Merge any acceptable patches by Firefox 31 merge deadline - completed
6. Build security work - Make progress on gitian and security tickets
7. Privacy UI improvements - Make progress on usability tickets; Improve NoScript Usability
8. Security Slider - #9387 (moved)

Goals for Firefox 31ESR series

1. Rebase patches on top of Firefox 31ESR
2. Review Firefox 31ESR for privacy and Tor Security
3. Pluggable Transport UI refinement (as needed) - #11180 (moved)
4. In-browser circuit and exit IP reporting - #5752 (moved) and child tickets
5. Further identifier privacy and fingerprinting improvements - Make progress on fingerprinting and linkability tickets
6. Provide sandbox installation scripts in the default bundles - #5791 (moved)
7. Deploy a Mozila Persona testing instance - #12193 (closed)
8. HTTPS-Everywhere enhancements and reporting improvements
9. Evaluate Firefox updater status, deploy by default or as an option
10. Merge any acceptable patches by Firefox 37 merge deadline

Timeline from Dev Meeting

July 15

• Enumerate and categorize security slider levels (#9387 (moved)) - Mike

Aug 1

• Deploy existing XPCShell tests (#12570 (moved)) - Nicolas
• Secure hosting for updates (#12623 (moved)) - Erinn?
• Automate update package distribution (#12622 (closed)) - Nicolas

Aug 15

• Deploy alpha with updater (#4234 (moved)) - Mike, Georg
• Initial UI for Security Slider (#9387 (moved)) - Georg
• Persona Test Server (#12193 (closed)) - Isis

Sep 1

• Rebuild + Rebase for FF31ESR (#12460 (moved), #12620 (moved)) - Georg + patch owners
• Update patches for Firefox in Bugzilla (#12619 (moved)) - Georg + patch owners
• Deploy remaining Firefox tests on Linux - Nicolas

Oct 1

• Review FF31ESR (#12621 (moved)) - Mike

Oct 14

• Switch to FF31ESR - Georg
• Sandboxing (#5791 (moved), #4522 (moved)) - Mike + Erinn?

Oct 31

• Circuit and Exit status reporting UI (#8641 (closed)) - Arthur + Tor help
• Apply Mixed Content Blocking Patch - Mike
• Persona Experimentation (Captchas, crypto tweaks: #12193 (closed)) - Isis