Missing PINs. Was: KeyGen2 - Replacement for [KeyGen/generateCRMFrequest/Xenroll]

2007-09-13 Thread Anders Rundgren
I just verified that none of the standardized key generation protocols (CMP, CRMF, XKMS) have any support for PIN handling and PIN policy. This is not surprising since this is already a part of a smart card. However, in the TPM-case you have a "blank" container and thus have to personalize PINs

"Master Password protection" feature request

2007-09-13 Thread Artem Kazantsev
I have a feature request. Is it possible to "Master password"-protect the setting in the Preferences "Master Password Timeout"? So that once Master Password Timeout is set to "Ask every time it's needed" it will require Master Password authentication to change it? I'm using Seamonkey... Thanks, A

Re: Do I need to give NSS random data?

2007-09-13 Thread Justin Dolske
Nelson Bolyard wrote: > With entropy seeding, the more the merrier. > You can't really have too much. On the other hand, why make apps and users jump through hoops to add more if it isn't needed? It seems rather dysfunctional to have a cryptographic RNG that's just going to pass the buck to the