Anders Rundgren wrote, On 2009-03-22 13:34: > I don't think PKCS #11 fills the role as universal crypto system for > the mass market since there is no registry like its competitors have. > Installing Security Devices (including finding out the path to them), > is way beyond what a consumer can do.
NSS has such a registry and FF updates it when you use the UI. It's also possible for the installer of that PKCS#11 module to update that registry, although the Firefox people seem intent on removing that capability. :( Red Hat is working on turning that into a cross-application, per-user or system wide registry in Linux, IINM. Bob can tell us more about that. I believe that something like NSS's registry may be part of the next revision of PKCS#11. There was a lot of discussion in the PKCS#11 WG about the registry format at one time. Not sure where that stands now. Bob? -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto
