On 10/22/2008 09:46 PM, Julien R Pierre - Sun Microsystems:
Yes, they should ... But the big question is how do they actually do that and get software to take notice of that suicide note ? I don't think that can really be done without standards.
I think that's the key to solve the problem of this discussion. But due to lacking standards, other solutions are looked at. I think this is what happens here.
Updating software with a new root module is a lot simpler. Of course that process has its own set of security issues as well.
Besides that, one of the problems is, how to reach each and every software (including older or non-updated or smaller ones).
-- Regards Signer: Eddy Nigg, StartCom Ltd. Jabber: [EMAIL PROTECTED] Blog: https://blog.startcom.org _______________________________________________ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto