I was probably unclear; I really meant PKI for external users like
on-line banking.
Microsoft have privately acknowledged that Java applets have replaced
CryptoAPI
in many of these applications while Mozilla seems to get hung on such input.
<keygen> probably have less than 2% market for client-side PKI.
Anders
Ian G wrote:
On 07/10/2009 15:46, Anders Rundgren wrote:
Ian G wrote:
<snip>
For Mozilla, which should be interested in end-user security, an
entirely different subject to client-wallet security, this should be
much closer to something interesting.
It should but it isn't since nobody from Mozilla (unlike Microsoft), has
shown any interest in why government agencies including UPSTO *do not*
use browsers' built-in client-PKI support.
I actually am fine with that. It isn't in Mozilla's interests to
support everyone's needs; just a certain class of needs. I think the
needs of the downloading 150m or 200m (?) is quite sufficient without
dragging in the arcania of compliance thinking that bedevils the
agencies.
iang
--
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto