= Basic Information Section =
=== Brief description ===
This project is to implement a basic push notification infrastructure for the Wikimedia products (web and apps). This infrastructure will consist of two software components: a new MediaWiki extension (`mediawiki/extensions/PushNotifications`) and a new Node.js service (`mediawiki/services/push-notifications`). We are requesting input on the security and privacy aspects of the system design, as well as a pre-deployment Security Readiness Review.
=== Do you have a project/product/program plan or documentation? ===
- {T249065}
- [[ https://www.mediawiki.org/wiki/Wikimedia_Product_Infrastructure_team/Push_Notifications_Infrastructure | Project homepage ]]
=== Primary Contacts ===
- @Mholloway, @dr0ptp4kt
=== What Security Team services do you anticipate needing? ===
- Threat Modeling
- Security Concept Review
- Security Readiness Review
=== What is the 'go live' date for deployment of this project ===
June 30, 2020
----
= Privacy Information Section =
=== Will any sensitive data to be collected, stored or exposed? ===
- The push notifications service will manage the storage of platform-issued subscriber tokens (for apps) or subscription data blobs (for web) provided by users. These will in turn be sent along to platform-specific push services in order to identify intended message recipients.
- Message content may expose a user's identify or interests
= Technical Information Section =
=== Do related discussions exist in Phab, on wiki, or in an RFC'? ===
{T249065}
=== Technology Stack ===
- Extension: MediaWiki, PHP, MySQL
- Service: Node.js, Cassandra
=== Security Readiness Review Section===
An anticipatory Security Readiness Review request has already been filed: {T246712}
=== Code ===
- Extension: https://gerrit.wikimedia.org/r/plugins/gitiles/mediawiki/extensions/PushNotifications/
- Service: TBD
=== Post-deployment ===
- Maintainers: Product Infrastructure
=== Working test environment ===
- TBD