Re: Standalone GTests

On 5/8/13 12:10, Gregory Szorc wrote: I think this is more a question for sheriffs and people closer to automation. Generally, you need to be cognizant of timeouts enforced by our automation infrastructure and the scorn people will give you for running a test that isn't efficient. But if it is

Re: Making proposal for API exposure official

On 6/21/13 15:45, Andrew Overholt wrote: I'd appreciate your review feedback. Thanks. I'm having a hard time rectifying these two passages, which seem to be in direct contradiction: 1. Note that at this time, we are specifically focusing on /new/ JS APIs and not on CSS, WebGL, WebRTC,

OS X: deprecate Apple clang 4.1?

that we can at least compile and link with 4.1), we formally abandon 4.1 as a supported compiler. -- Adam Roach Principal Platform Engineer a...@mozilla.com +1 650 903 0800 x863 ___ dev-platform mailing list dev-platform@lists.mozilla.org https

Re: Rethinking build defaults

). ___ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform -- Adam Roach Principal Platform Engineer a...@mozilla.com +1 650 903 0800 x863 ___ dev-platform mailing list dev-platform@lists.mozilla.org https

Re: Detection of unlabeled UTF-8

On 8/30/13 14:11, Adam Roach wrote: ...helping the user understand why the headline they're trying to read renders as Ð' ÐоÑ?дÑfме пÑEURедложили оÑ,обÑEURаÑ,ÑOE Ð?обелÑ? Ñf Ðz(Ð±Ð°Ð¼Ñ rather than ? ??? ?? ?? ? ?. Well, *there's* a heavy dose

Re: Detection of unlabeled UTF-8

On 8/30/13 12:24, Mike Hoye wrote: On 2013-08-30 11:17 AM, Adam Roach wrote: It seems to me that there's an important balance here between (a) letting developers discover their configuration error and (b) allowing users to render misconfigured content without specialized knowledge

Re: Detection of unlabeled UTF-8

the right thing here. And again, it has already been pointed out we cannot scan the entire byte stream Sure we can. We just can't fix things on the fly: we'd need something akin to a user prompt and probably a page reload. Which is what I'm proposing. -- Adam Roach Principal Platform Engineer

Re: Detection of unlabeled UTF-8

in the buffer are higher than U+007F). That hardly even rises to the level of noise. -- Adam Roach Principal Platform Engineer a...@mozilla.com +1 650 903 0800 x863 ___ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org

Re: Detection of unlabeled UTF-8

in a more user-friendly form. As to the why, it comes down to balancing the need to let the publisher know that they've done something wrong against punishing the user for the publisher's sins. -- Adam Roach Principal Platform Engineer a...@mozilla.com +1 650 903 0800 x863

Re: Detection of unlabeled UTF-8

). There's no good way to explain the nuanced implications of security decisions in a way that is both accessible to a lay user and concise enough to hold the average user's attention. On Thu, Sep 5, 2013 at 6:15 PM, Adam Roach a...@mozilla.com wrote: As to the why, it comes down to balancing

Re: java click to run problem on Firefox

On 10/10/13 11:09, Benjamin Smedberg wrote: We encourage you to transition your site away from Java as soon as possible. If there are APIs which you need in the web platform in order to make that possible, please let me know and we will try to make adding those a priority. I haven't

Re: java click to run problem on Firefox

On 10/10/13 12:06, Thierry Milard wrote: There are still a few things like speedy 3D That html-javascipt do bot do Dell enough http://www.unrealengine.com/html5/ -- Adam Roach Principal Platform Engineer a...@mozilla.com +1 650 903 0800 x863

Re: A proposal to reduce the number of styles in Mozilla code

workaround for retaining blame information doesn't work, or did you just miss that part of his message? -- Adam Roach Principal Platform Engineer a...@mozilla.com +1 650 903 0800 x863 ___ dev-platform mailing list dev-platform@lists.mozilla.org https

Re: Mozilla style guide issues, from a JS point of view

.) I'm not just sympathetic to this argument; I've made it myself in other venues. Put me down as emphatically agreeing. -- Adam Roach Principal Platform Engineer a...@mozilla.com +1 650 903 0800 x863 ___ dev-platform mailing list dev-platform

Re: Mozilla style guide issues, from a JS point of view

On 1/7/14 12:16, Martin Thomson wrote: On 2014-01-06, at 19:28, Patrick McManus mcma...@ducksong.com wrote: I strongly prefer at least a 100 character per line limit. Technology marches on. Yes. I’ve encountered too many instances where 80 was not enough. Since people are introducing

Re: Mozilla style guide issues, from a JS point of view

length limits. -- Adam Roach Principal Platform Engineer a...@mozilla.com +1 650 903 0800 x863 ___ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform

Re: Mozilla style guide issues, from a JS point of view

On 1/8/14 12:03, Martin Thomson wrote: On 2014-01-08, at 09:57, Adam Roach a...@mozilla.com wrote: Automated wrapping to a column width is less than optimal. If you look back at bz's example about how he would chose to wrap a specific conditional, it's based on semantic intent

Intent to land: Voice/video client (Loop)

or 34 (33 is a stretch goal for the team, 34 is a committed date). Preference behind which this will be implemented: For initial landing on Nightly, none. Will be behind loop.enabled before riding the trains. -- Adam Roach Principal Platform Engineer a...@mozilla.com +1 650 903 0800 x863

Re: Intent to land: Voice/video client (Loop)

On 5/30/14 10:14, Anne van Kesteren wrote: On Fri, May 30, 2014 at 5:03 PM, Adam Roach a...@mozilla.com wrote: Link to standard: N/A I take it this means there's no web-exposed API? That is correct. This is a browser feature, not accessible from content. -- Adam Roach Principal Platform

Re: WebCrypto for http:// origins

of Twitter's shortcomings as a communications medium. -- Adam Roach Principal Platform Engineer a...@mozilla.com +1 650 903 0800 x863 ___ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform

Re: http-schemed URLs and HTTP/2 over unauthenticated TLS (was: Re: WebCrypto for http:// origins)

.) -- Adam Roach Principal Platform Engineer a...@mozilla.com +1 650 903 0800 x863 ___ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform

Re: http-schemed URLs and HTTP/2 over unauthenticated TLS (was: Re: WebCrypto for http:// origins)

monitoring is taking place, and a conscious decision not to care. -- Adam Roach Principal Platform Engineer a...@mozilla.com +1 650 903 0800 x863 ___ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform

Re: Deprecate geolocation and getUserMedia() for unauthenticated origins

, though I haven't seen much from them on the pro-TLS front) to see if they would be on board with this and help us spread the message. The email address you're looking for is public-media-capt...@w3.org. This is a matter for the relevant specification, not some secret cabal. -- Adam Roach

Re: Deprecate geolocation and getUserMedia() for unauthenticated origins

On 9/27/14 02:24, Anne van Kesteren wrote: On Fri, Sep 26, 2014 at 11:11 PM, Adam Roach a...@mozilla.com wrote: This is a matter for the relevant specification, not some secret cabal. I was not proposing doing anything in secret. I also contacted the relevant standards lists. Yes, I saw

Re: Deprecate geolocation and getUserMedia() for unauthenticated origins

On 9/29/14 03:02, Anne van Kesteren wrote: On Mon, Sep 29, 2014 at 2:02 AM, Adam Roach a...@mozilla.com wrote: Yes, I saw that. Your proposal didn't see a lot of support in that venue. So far for geolocation there is nobody that is opposed. I'm responding on the topic of gUM, but I'll point

Re: http-schemed URLs and HTTP/2 over unauthenticated TLS

authenticated encryption everywhere, and am very excited about the Let's Encrypt initiative. But there's no reason to leave traffic gratuitously unencrypted while we drive towards 100% HTTPS penetration. -- Adam Roach Principal Platform Engineer a...@mozilla.com +1 650 903 0800 x863

Re: Intent to deprecate: persistent permissions over HTTP

, but actually fixed within the next few months: https://letsencrypt.org/ -- Adam Roach Principal Platform Engineer a...@mozilla.com +1 650 903 0800 x863 ___ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev

Re: Intent to deprecate: Insecure HTTP

, no one is going to hear them. Nicholas, like I, would clearly prefer that the time of people on this mailing list be spent conversing with others who want to work for a better future rather than those who simply want to be creatively abusive. You get to choose which one you are. -- Adam Roach

Re: Intent to deprecate: Insecure HTTP

On 5/4/15 11:24, Florian Bösch wrote: On Mon, May 4, 2015 at 3:38 PM, Adam Roach a...@mozilla.com mailto:a...@mozilla.com wrote: others who want to work for a better future A client of mine whom I polled if they can move to HTTPs with their server stated they do not have the time

Re: Intent to deprecate: Insecure HTTP

knowledge about how the the world of CAs has changed in the past decade. Seize it. -- Adam Roach Principal Platform Engineer a...@mozilla.com +1 650 903 0800 x863 ___ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org

Re: Intent to deprecate: Insecure HTTP

to be included, contact them and ask what you can do to help. In the meanwhile, as has been brought up many times in this thread already, there are already deployed or soon-to-be-deployed easy to use CAs in the world. -- Adam Roach Principal Platform Engineer a...@mozilla.com +1 650 903 0800 x863

Re: Intent to implement and ship: document.execCommand(cut/copy)

://blog.mozilla.org/security/2015/04/30/deprecating-non-secure-http/ -- Adam Roach Principal Platform Engineer a...@mozilla.com +1 650 903 0800 x863 ___ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform

Re: Intent to implement and ship: document.execCommand(cut/copy)

the NSGeneralPBoard off somewhere so that they can be moved back if necessary). I'd be a little surprised if this weren't also true for Linux and Windows. -- Adam Roach Principal Platform Engineer a...@mozilla.com +1 650 903 0800 x863 ___ dev-platform

Re: Intent to implement and ship: document.execCommand(cut/copy)

to prevent it from happening in the future, would be a good balance (in particular if denying permission restored the clipboard to its previous state) -- it informs the user and provides clear recourse without *requiring* additional action. -- Adam Roach Principal Platform Engineer

Re: Intent to implement and ship: document.execCommand(cut/copy)

if denying permission restored the clipboard to its previous state) -- it informs the user and provides clear recourse without *requiring* additional action. -- Adam Roach Principal Platform Engineer a...@mozilla.com +1 650 903 0800 x863 ___ dev

Re: Intent to implement and ship: document.execCommand(cut/copy)

properties of the feature itself. -- Adam Roach Principal Platform Engineer a...@mozilla.com +1 650 903 0800 x863 ___ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform

Re: Intent to deprecate: Insecure HTTP

On May 6, 2015, at 22:51, Eric Shepherd esheph...@mozilla.com wrote: would have been nice to have more notice The plan that has been outlined involves a staged approach, with new JavaScript features being withheld after some date, followed by a period during which select older JavaScript

Re: Changing the style guide's preference for loose over strict equality checks in non-test code

-- then I think you need to ultimately concede that the use of == is more confusing than it needs to be. -- Adam Roach Principal Platform Engineer a...@mozilla.com +1 650 903 0800 x863 ___ dev-platform mailing list dev-platform@lists.mozilla.org https

Re: Intent to deprecate: Insecure HTTP

democratic. I'm not sure I follow. I have a cert for a web site running on a dynamic address using DynDNS, and it works just fine. Certs are bound to names, not addresses. -- Adam Roach Principal Platform Engineer a...@mozilla.com +1 650 903 0800 x863

Re: Intent to deprecate: Insecure HTTP

. It is arguably more centralized than the current CA system. -- Adam Roach Principal Platform Engineer a...@mozilla.com +1 650 903 0800 x863 ___ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform

Re: Intent to deprecate: Insecure HTTP

has stark security implications. Resources loaded via an http URL make no such promises, so the situation isn't even remotely comparable. -- Adam Roach Principal Platform Engineer a...@mozilla.com +1 650 903 0800 x863 ___ dev-platform mailing list dev

Re: Intent to deprecate: Insecure HTTP

On 4/14/15 15:35, emmanueldeloge...@gmail.com wrote: Will Mozilla start to offer certificates to every single domain name owner ? Yes [1]. https://letsencrypt.org/ [1] I'll note that Mozilla is only one of several organizations involved in making this effort happen. -- Adam Roach

Re: Voting in BMO

On 6/9/15 17:00, Justin Dolske wrote: On 6/9/15 2:24 PM, Chris Peterson wrote: I vote for bugs as a polite (sneaky?) way to watch a bug's bugmail without spamming all the other CCs by adding myself to the bug's real CC list. I think if Bugzilla, with its long and complex history, ever has a

Re: Use-case for consideration, which will be difficult post-NPAPI

mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform -- Adam Roach Principal Platform Engineer a...@mozilla.com +1 650 903 0800 x863 ___ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org

Re: Proposed W3C Charter: WebRTC Working Group

the subject line may have confused things here. Do you mean WebRTC or WebPerf? -- Adam Roach Principal Platform Engineer a...@mozilla.com +1 650 903 0800 x863 ___ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo

Re: Replacing PR_LOG levels

/Logging: For frame-by-frame logging, use mediamanager:6 -- Adam Roach Principal Platform Engineer a...@mozilla.com +1 650 903 0800 x863 ___ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform

Re: Busy indicator API

policy. -- Adam Roach Principal Platform Engineer a...@mozilla.com +1 650 903 0800 x863 ___ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform

Re: Intent to implement and ship

|| ||window.mozRTCPeerConnection);| And a falsey value would simply make things not work. For all the cases I can think of (at least, in short order), making the alias falsey breaks as many things as simply removing it. -- Adam Roach Principal Platform Engineer a...@mozilla.com +1 650 903 0800 x863

Re: Heads-up: SHA1 deprecation (for newly issued certs) causes trouble with local ssl-proxy mitm spyware

On 1/4/16 1:00 PM, Adam Roach wrote: One of the points that Benjamin Smedberg has been trying to drive home is that data collection is everyone's job. After sending, I realized that this is a slight misquote. It should have been "data is everyone's job" (i.e.: there's more to

Re: Heads-up: SHA1 deprecation (for newly issued certs) causes trouble with local ssl-proxy mitm spyware

of landing exactly this kind telemetry as part of the same patch that disabled SHA-1; or, even better, in advance of it. -- Adam Roach Principal Platform Engineer a...@mozilla.com +1 650 903 0800 x863 ___ dev-platform mailing list dev-platform@lists.m

Re: Heads-up: SHA1 deprecation (for newly issued certs) causes trouble with local ssl-proxy mitm spyware

be tricky, so I'd propose we go for the simple count first. -- Adam Roach Principal Platform Engineer a...@mozilla.com +1 650 903 0800 x863 ___ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform

Re: Intent to unship: ISO-2022-JP-2 support in the ISO-2022-JP decoder

transcoding from the received encoding to something like UTF8? -- Adam Roach Principal Platform Engineer a...@mozilla.com +1 650 903 0800 x863 ___ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform

Basic Auth Prevalence (was Re: Intent to ship: Treat cookies set over non-secure HTTP as session cookies)

=1_keys=submissions_date=2016-05-04=0=1_submission_date=0 -- Adam Roach Principal Platform Engineer Office of the CTO ___ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform

Group Photo

Here is the group photo from this morning's session: https://www.flickr.com/photos/9361819@N04/27686864545/in/album-72157669699014665/ https://www.flickr.com/photos/9361819@N04/27686865615/in/album-72157669699014665/ -- Adam Roach Principal Platform Engineer Office of the CTO

Re: HTML mozbrowser frames on desktop Firefox?

.mozilla.org https://lists.mozilla.org/listinfo/dev-platform -- Adam Roach Principal Platform Engineer a...@mozilla.com +1 650 903 0800 x863 ___ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform

Re: Intent to deprecate: MacOS 10.6-10.8 support

- 10.8 why do you believe they are likely to in the future? Or even can? As I point out in my other message, a lot of the Intel Mac hardware cannot go past 10.6. -- Adam Roach Principal Platform Engineer a...@mozilla.com +1 650 903 0800 x863 ___ dev

Re: Intent to (sort of) unship SSLKEYLOGFILE logging

g list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform ___ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform -- Adam Roach Principal Platform Engineer Office of t

Re: FF49a1: Page load of jumping points doesn't work like it should in Wikipedia

ts On Fri, May 20, 2016 at 12:15 PM, Adam Roach <a...@mozilla.com> wrote: On 5/20/16 10:13, Gijs Kruitbosch wrote: On 20/05/2016 16:11, Tobias B. Besemer wrote: Plz open e.g. this URL: https://en.wikipedia.org/wiki/Microsoft_Windows#Alternative_implementations FF49a1 loads the page, jumps

Re: FF49a1: Page load of jumping points doesn't work like it should in Wikipedia

Ah, I think I spoke to quickly -- the jumping is caused by javascript, but not by javascript scrolling. It's certainly possible that javascript hiding of large elements would be treated as reflow events by this approach... /a On 5/20/16 15:19, Adam Roach wrote: There is one FAQ on that page

Re: FF49a1: Page load of jumping points doesn't work like it should in Wikipedia

then go ~1 screen-high (page) down. Can someone very this bug? The same thing happens in Chrome, so it seems like it's more likely to be an issue with Wikipedia. The fact that turning JavaScript off prevents this behavior would certainly seem to support that supposition. -- Adam Roach

Re: Intent to deprecate: MacOS 10.6-10.8 support

will mention ESR as a way to continue to get security updates for several more months? -- Adam Roach Principal Platform Engineer Office of the CTO ___ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev

Re: Intent to deprecate: MacOS 10.6-10.8 support

and I update to Firefox 48, at some point should I see a message saying I'll no longer receive future updates? Even better, is there any way to get the update system to automatically move such users over to 45ESR? -- Adam Roach Principal Platform Engineer a...@mozilla.com +1 650 903 0800 x863

Re: Action Script 4

S just as easily as it can Actionscript: http://tv.adobe.com/watch/adobe-technology-sneaks-2012/export-to-html5-from-flash-professional/ -- Adam Roach Principal Platform Engineer Office of the CTO ___ dev-platform mailing list dev-platform@lists.mozilla.org

Re: Intent to restrict to secure contexts: navigator.geolocation

/listinfo/dev-platform -- Adam Roach Principal Engineer, Mozilla ___ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform

Re: Removing tinderbox-builds from archive.mozilla.org

On 5/9/18 12:11 PM, L. David Baron wrote: It's useful for tracking down regressions no matter how old the regression is; I pretty regularly see mozregression finding useful data on bugs that regressed multiple years ago. I want to agree with David -- I recall one incident in particular where

Re: Proposed W3C Charter: JSON-LD Working Group

On 4/27/18 2:02 PM, L. David Baron wrote: On Friday 2018-04-27 10:07 +0300, Henri Sivonen wrote: For this reason, I think we should resist introducing dependencies on JSON-LD in formats and APIs that are relevant to the Web Platform. I think it follows that we should not support this charter. I

Re: New Policy: Marking Bugzilla bugs for features riding behind a pref

On 5/3/18 12:18 PM, Nicholas Alexander wrote: Not all features are feasible to ship behind feature flags. I'm pretty sure the proposed policy isn't intended to change anything regarding features that ship without associated feature flags, nor is it trying to get more features to ship behind

Re: open socket and read file inside Webrtc

On 7/4/18 7:24 AM, amantell...@gmail.com wrote: Hi, I'm very new with firefox (as developer, of course). I need to open a file and tcp sockets inside webrtc. I read the following link https://wiki.mozilla.org/Security/Sandbox#File_System_Restrictions there is the sandbox that does not permit to

Re: Proposed W3C Charter: Timed Text (TT) Working Group

Most of the deltas range from editorial to general good hygiene. The only changes of any real consequence that I see are: * Updating their previous work to new versions * Charter item to work on a profile of TTML2 to support audio-only use cases * Catch-all clause at the bottom of §2.1

Re: Intent to ship: Autodiscovery of WebExtension search engines

On 2/14/2020 5:05 PM, Daniel Veditz wrote: On Fri, Feb 14, 2020 at 11:50 AM Dale Harvey wrote: We’re proposing a new mime-type [...]: “x-xpinstall” for WebExtension search engines. Example: This is confusingly similar to "application/x-xpinstall" which we use to trigger extension installs

Looking for examples of bad IPC latency

Hey, folks -- I've been looking at the amount of time IPC messages spend in flight. So far, I've been using general web pages (e.g., modern news sites like CNN) to generate the profile information that I'm analyzing. Given that several people I spoke to in Berlin believed that IPC latency