On Tue, 2012-11-06 at 22:19 +0800, tehhzstar wrote: 
> Hello,
> 
> Currently, does Mozilla NSS support encrypting of file attachments? 
> Since it can encrypt email messages, I suppose, it can also support 
> encrypting of file attachments? 

NSS supports encryption.

Regarding email attachments, NSS supports CMS (RFC 3852) which is used
in encrypted/signed S/MIME emails.

Usually, if all text and all attachments of an email are combined into a
single grouped message (according to MIME standards), and the result is
encrypted.

The work to group multiple pieces into a single MIME message is a job
done by an application, and after this step, you can use NSS to encrypt
it.

> Is there an API available that can take 
> advantage of encrypting file attachments using NSS?

I don't think so, in addition to using NSS, your application should use
a MIME library to prepare the input message for the encryption
operation.


> Btw, will the next 
> release of Thunderbird 17 include the NSS 3.14 library? Thank you. 

Unlikely, I'm afraid NSS 3.14 got released too late for the Mozilla
release process. Here are the versions of NSPR/NSS currently being used
by the various Mozilla release branches:
https://kuix.de/mozilla/versions/

But given that Mozilla 17 will be an Extended-Support-Release
(maintained for enterprise consumers for one year), it would be good if
the Mozilla 17 branch eventually picks up NSS 3.14 in one of its
scheduled security fix releases (17.0.x). I can't promise it, but it
seems likely.

In any case, if you decide to build your own local copy of Thunderbird
17.x, it should work just fine to build against the newer NSS library.

Regards
Kai

Attachment: smime.p7s
Description: S/MIME cryptographic signature

-- 
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to