OWASP WebSpa Project - Revision history

Oliver M.: /* News */

2015-03-19T15:54:48Z

‎News

Oliver M.: Updated "Quick Download" links

2015-03-19T15:35:58Z

Updated "Quick Download" links

Oliver M.: Updated contributors

2015-03-19T06:26:47Z

Updated contributors

Johanna Curiel at 00:59, 3 March 2015

2015-03-03T00:59:59Z

Oliver M.: Release 0.8; updated Roadmap & News sections as well as the Quick Download link

2014-11-23T18:46:27Z

Release 0.8; updated Roadmap & News sections as well as the Quick Download link

Patryk Arciszewski: FAQ

2014-10-20T11:23:16Z

FAQ

Yiannis: /* Roadmap */

2014-10-02T22:05:14Z

‎Roadmap

Yiannis: /* Roadmap */

2014-10-02T22:00:29Z

‎Roadmap

Yiannis: /* FAQs */

2014-10-02T11:48:37Z

‎FAQs

Yiannis: /* People */

2014-09-30T12:08:05Z

‎People

@@ Line 265: / Line 265: @@
 = News =
-* [23 Nov 2014] Version 0.8 has been release and can now be found in the download section. We are proud to offer a working, stable proof-of-concept of WebSpa.
+* [19 Feb 2015] The source WebSpa code repository has been migrated to GitHub. The compiled releases (.jar) are still made available on SourceForge.
 * [19 Aug 2014] Our project was featured in the OWASP Connector newsletter. [http://hosted-p0.vresp.com/1479611/4d8d3315c2/ARCHIVE (link)]
 * [07 May 2014] Added four video links in the respective "Video" tab, referencing YouTube
-* [24 Apr 2014] Version 0.7 has been release and can now be found in the download section. Also, we welcome Paweł and Joël to the team.
+* [24 Apr 2014] Version 0.7 has been release and can now be found in the download section. Also, we welcome Joël to the team.
 * [20 Mar 2014] [http://www.eventbrite.co.uk/e/owasp-london-chapter-meeting-march-2014-tickets-10063386861 WebSpa has been presented during OWASP London Chapter Meeting]
-* [16 Mar 2014] WebSpa has a new contributor – Paweł Goleń. Paweł welcome in the team!
+* [16 Mar 2014] WebSpa has a new contributor – Paweł Goleń. Paweł, welcome to the team!
 * [14 Mar 2014] [https://code.google.com/p/web-spa/ Scheduled the deletion of the Google code project, given that downloads require a new account]
 * [04 Mar 2014] [https://soundcloud.com/#owasp-podcast/the-owasp-webspa-project-with The WebSpa podcast has now been available!]

@@ Line 45: / Line 45: @@
 == Quick Download ==
 [http://sourceforge.net/projects/webspa/files/webspa-08.zip/download WebSpa v0.8]
 ==Classifications==

@@ Line 310: / Line 310: @@
 Active contributors:
 * [[User:Yiannis|Yiannis Pavlosoglou]] - Inception & Development
 * Paweł Goleń - Breaking & Infrastructure
 * Joël Rouiller - Development & Optimisation
 * [[User:Oliver_M.|Oliver Merki]] - Leader & Operations
@@ Line 318: / Line 318: @@
 Retired contributors:
 * [[User:Dr. Markus Maria Miedaner|Markus Maria Miedaner]]
 = Roadmap =

@@ Line 1: / Line 1: @@
 =Main=
+<div style="width:100%;height:90px;border:0,margin:0;overflow: hidden;">[[File:Incubator_big.jpg|link=OWASP_Project_Stages#tab=Incubator_Projects]]</div>
 {| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
 | valign="top"  style="border-right: 1px dotted gray;padding-right:25px;" |

@@ Line 45: / Line 45: @@
 == Quick Download ==
-[http://sourceforge.net/projects/webspa/files/webspa-07.zip/download WebSpa v0.7]
+[http://sourceforge.net/projects/webspa/files/webspa-08.zip/download WebSpa v0.8]
 ==Classifications==
@@ Line 260: / Line 260: @@
 = News =
 * [19 Aug 2014] Our project was featured in the OWASP Connector newsletter. [http://hosted-p0.vresp.com/1479611/4d8d3315c2/ARCHIVE (link)]
 * [07 May 2014] Added four video links in the respective "Video" tab, referencing YouTube
@@ Line 322: / Line 323: @@
 == Release 0.9 (Q3/2015) ==
-WebSpa_v0.9 will be major release and include a comprehensive redesign of the WebKnock format in order to improve overall security and robustness of the request. The tickets for this release are:
+WebSpa_v0.9 will be major release and include a comprehensive redesign of the WebKnock format in order to improve overall security and robustness of the request, but also offer improved usability features, which will simplify installing, configuring and running WebSpa.. The tickets for this release are:
 	New WebKnock request format should be defined
@@ Line 328: / Line 329: @@
 	A threat model for WebSpa should be created and reviewed
 	Apache should be replaced by nginx
 	Add easy way to run the server as a background daemon
-== Release 0.8 (Q4/2014) ==
+== [http://sourceforge.net/projects/webspa/files/webspa-08.zip/download Release 0.8 (Q4/2014)] ==
-WebSpa_v0.8 will be sort of a proof-of-concept of WebSpa. A stable version to demonstrate the concept of WebKnocking, however, with some limitations with regards to usability/configuration and modularity (e.g. changing the hashing algorithm). The tickets for this release are:
+WebSpa_v0.8 is sort of a proof-of-concept of WebSpa. A stable version to demonstrate the concept of WebKnocking, however, with some limitations with regards to usability/configuration and modularity (e.g. changing the hashing algorithm). The tickets for this release are:
 	Change SSL configuration to allow wget
 	WebSpa administrator to WebSpa user output
 	umask 077 should be added to webspa.sh
 	A known_hosts file should be used to maintain the list of successfully verified keys

← Older revision		Revision as of 11:23, 20 October 2014
Line 272:		Line 272:

	=FAQs=		=FAQs=
		+
		+	; Does WebSpa supports older versions of Java?
		+	: No. WebSpa is tested with an up-to-date JRE package, thus to run WebSpa a JRE 1.7 or greater is needed.
		+	Using older versions of Java may lead to unexpected system behaviors.

	; What does the ASCII-Art for WebSpa look like?		; What does the ASCII-Art for WebSpa look like?

@@ Line 341: / Line 341: @@
 	Verification of server's public key fingerprint should be possible
 	Help Files Update (0.8)
-	Arrays.equals is not a constant time function
+  - FIXED: Modified the checking of 2 arrays being equal to be constant in time (Ticket #27)
 	Create maven build task for release

@@ Line 350: / Line 350: @@
 WebSpa _v0.7 offers enhanced user administration functionality. The WebSpa client now offers the possibility for a user to connect to a web server with an untrusted/self-signed certificate.
-  - NEW: The WebSpa client asks the user if he wants to connect web servers with unknown/untrusted/self-signed certificates. (Ticket #28)
+  - NEW: The WebSpa client asks the user if they want to connect web servers with untrusted certificates. (Ticket #28)
   - NEW: Introduced ‘passwd’ command, which allows the WebSpa administrator to modify a user’s password.
   - NEW: Introduced ‘pass-phrase show’ command, which allows the WebSpa administrator to print a user’s pass-phrase to the screen.

← Older revision		Revision as of 11:48, 2 October 2014
Line 272:		Line 272:

	=FAQs=		=FAQs=
		+
		+	; What does the ASCII-Art for WebSpa look like?
		+	__
		+	/\ \
		+	__ __ __ __\ \ \____ ____ _____ __
		+	/\ \/\ \/\ \ /'__`\ \ '__`\ _______ /',__\/\ '__`\ /'__`\
		+	\ \ \_/ \_/ \/\ __/\ \ \L\ \/\______\/\__, `\ \ \L\ \/\ \L\.\_
		+	\ \___x___/'\ \____\\ \_,__/\/______/\/\____/\ \ ,__/\ \__/.\_\
		+	\/__//__/ \/____/ \/___/ \/___/ \ \ \/ \/__/\/_/
		+	\ \_\
		+	\/_/
		+
		+	The font is Larry 3D generated [http://patorjk.com/software/taag/#p=display&f=Larry%203D&t=web-spa here].

	; Who are the actors required in order to use the WebSpa tool?		; Who are the actors required in order to use the WebSpa tool?