On Tue, 2012-07-24 at 16:12 +0200, Anders Rundgren wrote: > IMO, this is not an NSS issue, it is rather a *NIX issue. All other > operating systems (that I'm aware of NB...) including *NIX-derivates > like Android, already have a system-wide cryptographic architecture.
Yes. It's an issue I'm actively trying to solve. NSS seems to have made some *attempt* at solving it... which has some issues, and which doesn't even seem to have been picked up by Mozilla's own products. I'm trying to work out whether I should attempt to fix what NSS has and build on top of it, or whether it should just be discounted as a bad idea and I should do something completely different. I'd *prefer* to get something based on the NSS sysdb to work, and make it work in GnuTLS/OpenSSL/etc via PKCS#11. But that's just my initial prejudice. -- dwmw2
smime.p7s
Description: S/MIME cryptographic signature
-- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto