On Tue, 2012-07-24 at 16:12 +0200, Anders Rundgren wrote:
> IMO, this is not an NSS issue, it is rather a *NIX issue.  All other
> operating systems (that I'm aware of NB...) including *NIX-derivates
> like Android, already have a system-wide cryptographic architecture.

Yes. It's an issue I'm actively trying to solve. NSS seems to have made
some *attempt* at solving it... which has some issues, and which doesn't
even seem to have been picked up by Mozilla's own products.

I'm trying to work out whether I should attempt to fix what NSS has and
build on top of it, or whether it should just be discounted as a bad
idea and I should do something completely different.

I'd *prefer* to get something based on the NSS sysdb to work, and make
it work in GnuTLS/OpenSSL/etc via PKCS#11. But that's just my initial
prejudice.

-- 
dwmw2

Attachment: smime.p7s
Description: S/MIME cryptographic signature

-- 
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to