Wan-Teh Chang wrote, On 2008-09-29 10:18:
> On Sat, Sep 27, 2008 at 12:17 PM, Nelson B Bolyard <[EMAIL PROTECTED]> wrote:
>> Subrata Mazumdar wrote, On 2008-09-27 06:33:
>>> Actually, the problem is even worse - some of the applications use
>>> unencrypted private key
>> That is precisely why NSS does not support PKCS#8 files.  Applications
>> that generate private keys and then just leave them lying around in
>> unprotected files are having fun with cryptography, but aren't serious
>> about security.  NSS is serious about security.
> 
> I am very interested in the secure solution to this problem: how to
> manage a large number of servers easily.  

What about that problem necessitates the use of PKCS#8?
On what stone is it chiseled that servers must read private keys from
PKCS#8 files every time they start up?

_______________________________________________
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to