On 01/04/2012 03:51 PM, Brian Smith wrote: > I am concerned that the libpkix code is hard to maintain and that > there are very few people available to maintain it. If we have a group > of people who are committed to making it work, then Mozilla relying on > libpkix is probably workable. But, it is a little distressing that > Google Chrome seems to avoid libpkix whenever possible, and that > Sun/Oracle [redacted]. And, generally, nobody I have talked to seems > happy with libpkix in practice, even though it seems to be the right > choice in theory. Literally, the best thing that has been said about > it is "it's the only choice we have." I wonder if that is really true. > - Brian
Again, I'm OK with reworking libpkix. Trying to bend the old code into doing RFC 3280 processing though will not help in the maintainability arena. Let's get down to one set of code that meets the standards and work on improving it. bob
-- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto
