April King

laboratory. Because good website security shouldn't only be available to mad scientists!

certainly-something. WebExtension that shows certificate chains in an aesthetically pleasing manner.

cryptonom-icon. Freely available cryptographic iconography

decklist. The code behind decklist.org, which generates DCI Registration Sheets.

picoca. PicoCA is a simple CA intended for use for educational and self-hosting purposes.

badsite.io. badsite.io is intended for manual testing of web security in clients and test tolos

crypto-presentation. Crypto presentation to be used at Mozilla and elsewhere

httpbin. HTTP Request & Response Service, written in Python + Flask.

codelesscode-recipe. Calibre recipe for thecodelesscode.com

textual-theme-Equinox. A series of updates to the nox theme from Textual 5

security-report-card. WebExtension that the Mozilla Observatory to scan sites and determine how secure they are.

alexcam. A little HTML5-based webcam system, with delays and other nifty effects.

mtg-counters. Python

.dotfiles. Shell

badssl.com. Memorable test site with bad SSL configs.

pyinfo. Python version of phpinfo(). If there's any evil I'll be remembered for, it's this.

websec-presentation. Presentation on the History of Web Security at Paris-Web 2018 (and maybe others)

http-observatory. HTTP Observatory

tls-observatory. An observatory for TLS configurations, X509 certificates, and more.

mtgspoilerbot. The code behind @MTGSpoilerBot

curl. A command line tool and library for transferring data with URL syntax, supporting DICT, FILE, FTP, FTPS, GOPHER, GOPHERS, HTTP, HTTPS, IMAP, IMAPS, LDAP, LDAPS, MQTT, POP3, POP3S, RTMP, RTMPS, RTSP, SCP, SFTP, SMB, SMBS, SMTP, SMTPS, TELNET and TFTP. libcurl offers a myriad of powerful features

certbot. Certbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any other CA that uses the ACME protocol.

revorb. Remake of the ancient revorb for ww2ogg

what-happens-when. An attempt to answer the age old interview question "What happens when you type google.com into your browser and press enter?"

permission.site. A site to test the interaction of web APIs and browser permissions.

pubconf-presentation. Presentation for pubconf.io in Minneapolis

ssh_scan_api. A web API for ssh_scan (https://github.com/mozilla/ssh_scan)

eslint. A fully pluggable tool for identifying and reporting on patterns in JavaScript.

wikimo_opsec. OpSec's wiki.mozilla.org documentation

servo.org. Main website for Servo.

sso-dashboard-configuration. Mozilla list of RPs and Groups for SSO-Dashboard

auth0-deploy. Rules and hosted pages (lock) used for the Auth0 instances of Mozilla.

airmozilla. AirMozilla is the video broadcasting site for the Mozilla project

letsencrypt-overview. A presentation about Let's Encrypt

ssh_scan. A prototype SSH configuration and policy scanner (Blog: https://mozilla.github.io/ssh_scan/)

surveillance.mozilla.org. Source code for https://surveillance.mozilla.org

ssllabs-scan. A command-line reference-implementation client for SSL Labs APIs, designed for automated and/or bulk testing.