Initial version

.gitignore

@@ -0,0 +1,4 @@
+public/
+.DS_Store
+# Local Netlify folder
+.netlify

.prettierignore

@@ -0,0 +1,2 @@
+# Ignore some template partials, because prettier adds closing HTML tags
+layouts/partials/header.html

.vscode/settings.json

@@ -0,0 +1 @@
+{ "prettier.printWidth": 160 }

README.md

@@ -0,0 +1,11 @@
+# memsafety-website
+
+Website for ISRG's memory safety project, Prossimo.
+
+```
+hugo server -F
+```
+
+And open <a href="http://localhost:1313/">http://localhost:1313/</a> in your
+browser. Note that the -F flag will show items to be published in the future
+(like blog posts with dates in the future).

assets/sass/_theme-overrides.scss

@@ -0,0 +1,77 @@
+/* Keep styles here that are specific to overriding the theme */
+
+@import "_variables";
+
+//
+a {
+  color: $primary_color !important;
+}
+
+.btn-primary {
+  background-color: $primary_color !important;
+  border-color: $primary_color !important;
+}
+
+.btn-outline-primary {
+  border-color: $primary_color !important;
+  color: $primary_color !important;
+
+  &:hover {
+    background-color: $primary_color !important;
+    color: #fff !important;
+  }
+}
+
+.text-primary {
+  color: $primary_color !important;
+}
+
+.btn-scroll-top {
+  background-color: $primary_color !important;
+
+  i {
+    color: #fff;
+  }
+}
+
+.navbar-light .navbar-nav .nav-link:hover,
+.navbar-light .navbar-nav .nav-link:focus,
+.navbar-light .navbar-nav .nav-item:hover > .nav-link,
+.dropdown-item:hover,
+.dropdown-item:focus {
+  color: $primary_color !important;
+}
+
+.btn-mint {
+  background-color: $brand_mint;
+  color: $brand_dark_blue !important;
+  border-color: $brand_mint;
+  &:hover {
+    border-color: $brand_dark_blue;
+  }
+  // @todo Hover color for mint buttons
+}
+
+footer {
+  a {
+    color: #fff !important;
+  }
+}
+
+:root {
+  --font-family-sans-serif: "Open Sans", sans-serif;
+}
+
+body,
+.tooltip,
+.popover {
+  font-family: "Open Sans", sans-serif;
+}
+
+.bg-dark {
+  background-color: #051735 !important;
+}
+
+.pt-md-8 {
+  padding-top: 8rem !important;
+}

assets/sass/_variables.scss

@@ -0,0 +1,4 @@
+$brand_dark_blue: #082659;
+$brand_mint: #14dfb4;
+
+$primary_color: $brand_dark_blue;

assets/sass/main.scss

@@ -0,0 +1,36 @@
+@import "_variables";
+@import "_theme-overrides";
+@import "newsletter";
+@import "page";
+@import "post";
+
+body {
+  color: $primary_color !important;
+}
+
+#footer-logo {
+  max-width: 80%;
+}
+
+.btn-large {
+  font-size: 18px;
+}
+
+.logo-container {
+  width: 200px;
+  height: 200px;
+
+  img {
+    width: 100%;
+    height: 100%;
+    object-fit: contain;
+  }
+}
+
+.text-primary-knockout {
+  color: $brand_mint;
+  background: $brand_dark_blue;
+  padding: 5px;
+  transform: rotate(-1deg);
+  display: inline-block;
+}

assets/sass/newsletter.scss

@@ -0,0 +1,20 @@
+.gpdr-notes {
+  color: #fff;
+
+  label.checkbox {
+    margin-left: 8px;
+  }
+
+  p {
+    margin-bottom: 4px;
+  }
+
+  .font-small {
+    font-size: 10px;
+    color: rgba(255, 255, 255, 0.6);
+
+    a {
+      color: rgba(255, 255, 255, 0.6) !important;
+    }
+  }
+}

assets/sass/page.scss

@@ -0,0 +1,36 @@
+@import "_variables";
+
+.tpl-page {
+  .cs-page-wrapper {
+    margin-top: 100px;
+  }
+
+  h1 {
+    text-align: center;
+    color: $primary_color;
+  }
+}
+
+.footnotes {
+  padding-top: 10px;
+
+  hr {
+    margin-bottom: 10px;
+  }
+
+  ol {
+    padding-left: 17px;
+  }
+}
+
+.sponsor-logos {
+  display: flex;
+
+  .sponsor {
+    margin-bottom: 40px;
+    margin-right: 40px;
+    img {
+      max-height: 100px;
+    }
+  }
+}

assets/sass/post.scss

@@ -0,0 +1,9 @@
+.tpl-post {
+  .cs-page-wrapper {
+    margin-top: 100px;
+  }
+  h1 {
+    text-align: center;
+    color: $primary_color;
+  }
+}

config.toml

@@ -0,0 +1,41 @@
+baseURL = "https://prossimo-alpha.netlify.app/"
+languageCode = "en-us"
+
+contentDir = "content/en"
+defaultContentLanguage = "en"
+defaultContentLanguageInSubdir = false
+
+[params]
+copyrighthtml = "© 2021 Internet Security Research Group. All rights reserved."
+address = "548 Market St, PMB 57274, San Francisco, California 94104-5401"
+address_line_1 = "548 Market St, PMB 57274"
+address_line_2 = "San Francisco, California 94104-5401"
+images = ["images/isrg-opengraph.png"]
+description = "Prossimo is lorem ispum dolor sit."
+
+# Date and time formatting, see https://gohugo.io/functions/format/
+time_format_RFC3339 = "2006-01-02T15:04:05Z07:00"
+time_format_RFC822 = "Mon, 02 Jan 2006 15:04:05 -0700"
+time_format_default = "Jan 2, 2006"
+
+[markup]
+defaultMarkdownHandler = "goldmark"
+
+[markup.goldmark]
+[markup.goldmark.extensions]
+typographer = false
+[markup.goldmark.renderer]
+unsafe = true
+[markup.goldmark.parser]
+# To keep § ids identical after the migration from blackfriday to goldmark
+autoHeadingIDType = "blackfriday"
+
+[languages]
+[languages.en]
+title = "Prossimo"
+languageName ="English"
+# Weight used for sorting.
+weight = 1
+description = """
+  ISRG’s mission is to reduce financial, technological, and educational barriers to secure communication over the Internet.
+"""

content/en/_headers

@@ -0,0 +1,7 @@
+/*
+    Content-Security-Policy: default-src 'none'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; script-src 'self' https://donorbox.org; img-src 'self' data:; frame-src 'self' https://donorbox.org https://youtube.com https://www.youtube.com https://youtube-nocookie.com https://www.youtube-nocookie.com; font-src https://prossimo-alpha.netlify.app https://fonts.gstatic.com; connect-src 'self'; object-src 'self';
+    X-Frame-Options: DENY
+    X-XSS-Protection: 1; mode=block
+    X-Content-Type-Options: nosniff
+    Referrer-Policy: no-referrer
+    Feature-Policy: geolocation none;midi none;notifications none;push none;sync-xhr none;microphone none;camera none;magnetometer none;gyroscope none;speaker self;vibrate none;fullscreen self;

content/en/about.html

@@ -0,0 +1,55 @@
+---
+title: About Prossimo
+slug: about
+---
+
+<section class="slice slice-sm">
+<div class="container">
+
+<h2>Who We Are</h2>
+
+<p>Prossimo is an <a href="https://www.abetterinternet.org/">Internet Security Research Group project (ISRG)</a> project.</p>
+
+<p>ISRG couldn't do it alone though. We have a strong community of developers, maintainers, advisors, and funders helping us out!</p>
+
+<h2>Goals</h2>
+
+<p>Our first goal is to move the Internet's security-sensitive software infrastructure to <a href="/docs/memory-safety/">memory safe</a> code. Many of the most critical software vulnerabilities are memory safety issues in C and C++ code. While there are ways to reduce the risk, including fuzzing and static analysis, such mitigations do not eliminate the risk and they consume a lot of resource on an ongoing basis. Using memory safe languages eliminates the entire class of issues. We recognize the amount of work it will take to move significant portions of the Internet’s C and C++ software infrastructure to memory safe code, but the Internet will be around for a long time. There is time for ambitious efforts to pay off. By being smart about our initial investments, focusing on the most critical components, we can start seeing significant returns within 1-2 years.</p>
+
+<p>Our second goal is to change the way people think about memory safety. Today it’s considered perfectly normal and acceptable to deploy software written in languages that aren't memory safe, like C and C++, on a network edge, despite the overwhelming evidence for how dangerous this is. Our hope is that we can get people to fully recognize the risk and view memory safety as a requirement for software in security-sensitive roles.</p>
+
+<h2>Prossimo's Role</h2>
+
+<p>We view ISRG's role as providing strategic planning, facilitation, and communication. We identify high impact projects, build and maintain relationships with maintainers and funders, help develop plans, and coordinate the work. This includes raising the necessary funds and getting them to the right people (often maintainers). We communicate with the public regarding progress and momentum in order to build support for the project and the ideas behind it.</p>
+
+<p>We believe we have a strong competency in identifying work that is both high impact and efficiently achievable. Our aim is for funding entrusted to us to provide a strong return on investment in terms of making the Internet’s software infrastructure safer for everyone.</p>
+
+<h2>Development Model</h2>
+
+<p>Our model operates on the following principles:</p>
+
+<h3>1. Identify critical projects the best return on investment potential</h3>
+
+<p>Factors include usage/popularity, security sensitivity, modularity, and the potential for cooperation with maintainers.</p>
+
+<h3>2. Work with maintainers whenever possible</h3>
+
+<p>Maintainers have valuable knowledge and the ability to ship memory safety updates to their existing users. Building competing software and getting users to switch is much more difficult. By working with maintainers, and funding them when it makes sense, we can get safer software into the hands of users more quickly.</p>
+
+<p>Funding maintainers for the work helps to create buy-in and alleviates resource concerns.</p>
+
+<h3>3. Prefer a modular approach</h3>
+
+<p>We encourage projects to replace libraries or modular functionality with memory safe libraries, rather than embark upon ground-up rewrites. This allows us to break up the work into manageable pieces and deliver value incrementally.</p>
+
+<p>It also allows for build-time configuration to select implementations when existing users need the ability to opt-in to the older unsafe versions, either because their environment does not support the new language or because there is a functionality difference. This addresses the concern many maintainers have about abandoning certain specialized users.</p>
+
+<p>Since many projects will end up using the same memory safe libraries, this approach also allows us to invest and build confidence in a particular set of libraries. Investments in a library for one project will add value across multiple projects. For example - the curl project will use the Hyper and Rustls libraries. The work we do to build excellent C API wrappers and improve the integration experience will help with many projects that will use the libraries in the future.</p>
+
+<h3>4. Build trust by providing additional success stories over time</h3>
+
+<p>Some maintainers are understandably hesitant to make fundamental changes to how their projects work, such as adding a new language or replacing important libraries with new ones. It’s on us to make the case, and we will do that by building up a corpus of success stories and continuing to engage with maintainers about how their concerns can be addressed.</p>
+
+<p>We will start by working with more progressive maintainers that need less convincing. As those projects succeed and get positive feedback, other maintainers will come to trust the model that we advocate. Our hope is that over time we can convince more conservative maintainers that moving to memory safe code, with our support, is a worthwhile endeavor.</p>
+</div>
+</section>