-
Notifications
You must be signed in to change notification settings - Fork 689
Development Roadmap
This document describes the current priorities for the SecureDrop project. If you have thoughts, you are welcome to file an issue on GitHub or drop by our Gitter chatroom to talk with us.
Please note that this is a tentative roadmap. As releases approach, tickets will become more fine grained. Items may be added, removed or modified. The versioning here may also change - e.g. if bugfixes need to be pushed out, there may be some deviation from this roadmap.
SecureDrop 2.6.1 was released on August 17, 2023. It contains a fix to the logic for provisioning Journalist Workstations on Tails. As there were no server-side code changes, .deb packages were not built for this release.
A pilot project is underway to evaluate the use of Qubes OS as the foundation of an integrated SecureDrop Workstation, with a graphical SecureDrop Client application. See our blog post for more information.
SecureDrop Core: the SecureDrop server code, and any other code required to operate a traditional SecureDrop installation. See the securedrop repository for more information. SecureDrop Core releases are coupled to the Tails release calendar where possible.
SecureDrop Workstation: an integrated workstation environment that can connect to a SecureDrop server. See the securedrop-workstation repository for more information.
⋯ = started
✔ = completed
-
Cross-project
- ✔ Onboard new team members
-
SecureDrop Workstation:
- ⋯ Read receipts for journalist replies
- ⋯ Make SecureDrop Client translatable via Weblate
- ⋯ Deletion performance improvements
- ⋯ "Download conversation"
-
SecureDrop Server:
- ✔ Deleted user management improvements
- ✔ Upgrade to Flask v2.0
- ✔ Conclude accessibility improvements for JI/SI
- ✔ Support 11th-gen Intel chipsets for servers (kernel)
- ✔ Spam management improvements
-
Cross-project
- ✔ Onboard new team members
-
SecureDrop Workstation:
- ✔ Read receipts for journalist replies
- ✔ Make SecureDrop Client translatable via Weblate
- ✔ Deletion performance improvements
- ⋯ "Download conversation"
- ✔ fedora-35
- ✔ Qubes 4.1 compatibility
- ✔ Signing key udpate
-
SecureDrop Server:
- ✔ Source Interface design standardization
- ✔ Allow removal of unsupported languages
- ✔ 2FA security fixes
- ✔ Signing key update
- ✔ Source keyring management improvements
- ✔ demo.securedrop.org improvements (deployment branch; landing page contents in public repo)
- ⋯ Inverted sign-in flow for Source Interface
- ✔ Unified sessions for Journalist Interface and API
- ✔ Functional test refactoring (community contribution)