Robert Relyea wrote: > Martin Hoefling wrote: >> Just to reduce confusion about my mail: I am Martin Hoefling (using >> KMail/Kontact), and Wurstsemmel is using Thunderbird. We encountered the >> problems, while testing communication via S/Mime certificates. >> >> As far as we understood, this is a thunderbird issue. Who should file a >> bugreport? Shall we do it? >> > file the bug at bugzilla.mozilla.org New->Other Products->NSS > > We don't know if it's PSM or NSS, but at this point I think NSS picks > the cipher, so start there.
I filed Bug 379625 – Encrypting with RC2-40 when 3DES is preferred on this issue. Product: Core, Component: Security:S/MIME We can change it to NSS if & when we've identified the cause to be NSS. All interested parties should add themselves to the CC list of that bug. > Nelson's experiment clearly exonerates KMail. I'm not entirely sure of that yet. I found that KMail is encoding its encryption preferences for fixed key size ciphers (such as 3DES) differently from the way that NSS does it. I suspect that NSS is having troubles decoding KMail's encoding of the cipher preferences, for this reason. See the bug for details. The question is: is KMail's encoding allowed by the standard? Or it is wrong? (Or is NSS's wrong?) Probably NSS should ALLOW KMail's encoding, whether it is strictly by the standards or not. > bob >> We can test, the patch, if a communication partner with KMail is needed. Thanks for that offer. I'm sure we will want you to help test it. /Nelson _______________________________________________ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto
