This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "Projects/OWASP Passfault/Roadmap"

From OWASP
Jump to: navigation, search
Line 1: Line 1:
  
 +
 +
== Release 0.8 ==
 +
Goal: preparation for ESAPI
 +
* More meaningful word lists
 +
** Frequency lists: build lists of the most common words, names
 +
* ESAPI Authenticator Decorator
 +
** Implement an ESAPI Authenticator that will enhance an existing authenticator with passfault implementing the "verifyPasswordStrength" method.
 +
** A volunteer force from university of Florida has built this.  All that remains is to get it into ESAPI.
 +
 +
== Release 1.0 ==
 +
Goal: Enterprise Ready, working with ESAPI
 +
 +
== Other Important Goals ==
 
* Javascript library generated by GWT and GWT Export.  Do you know GWT?  Please help us build a javascript version of passfault using GWT Exporter: https://code.google.com/p/gwt-exporter/
 
* Javascript library generated by GWT and GWT Export.  Do you know GWT?  Please help us build a javascript version of passfault using GWT Exporter: https://code.google.com/p/gwt-exporter/
 
* Document each pattern finder on the OWASP wiki.
 
* Document each pattern finder on the OWASP wiki.
* ESAPI Authenticator Decorator: Implement an ESAPI Authenticator that will enhance an existing authenticator with passfault implementing the "verifyPasswordStrength" method.
 
** A volunteer force from university of Florida has built this.  All that remains is to get it into ESAPI.
 
 
* JQuery Plugin: A JQuery plugin that will let a web site use either the passfault applet or a passfault JSON Service to analyze a password.
 
* JQuery Plugin: A JQuery plugin that will let a web site use either the passfault applet or a passfault JSON Service to analyze a password.
 
* Wordlists:  We can always use better word lists.  Contact us on the mailing list if you want to help.
 
* Wordlists:  We can always use better word lists.  Contact us on the mailing list if you want to help.
  
 
For current bugs and smaller tasks see the issues list on github: https://github.com/c-a-m/passfault/issues?state=open
 
For current bugs and smaller tasks see the issues list on github: https://github.com/c-a-m/passfault/issues?state=open

Revision as of 21:57, 13 March 2014


Release 0.8

Goal: preparation for ESAPI

  • More meaningful word lists
    • Frequency lists: build lists of the most common words, names
  • ESAPI Authenticator Decorator
    • Implement an ESAPI Authenticator that will enhance an existing authenticator with passfault implementing the "verifyPasswordStrength" method.
    • A volunteer force from university of Florida has built this. All that remains is to get it into ESAPI.

Release 1.0

Goal: Enterprise Ready, working with ESAPI

Other Important Goals

  • Javascript library generated by GWT and GWT Export. Do you know GWT? Please help us build a javascript version of passfault using GWT Exporter: https://code.google.com/p/gwt-exporter/
  • Document each pattern finder on the OWASP wiki.
  • JQuery Plugin: A JQuery plugin that will let a web site use either the passfault applet or a passfault JSON Service to analyze a password.
  • Wordlists: We can always use better word lists. Contact us on the mailing list if you want to help.

For current bugs and smaller tasks see the issues list on github: https://github.com/c-a-m/passfault/issues?state=open