Re: nsIChannel for internal domains

2009-06-25 Thread MAK
Thankx Peter, But how is the registration for nsIRequestObserver done. I tried out many options, but in no way I'm able to query the nsISSLStatus interface through nsIRequestObserver. regards, Arun On Jun 25, 6:07 pm, Peter Djalaliev wrote: > Hi, > > The images are also fetched through HTT

Re: Unable to add softokn3.dll to secmod.db

2009-06-25 Thread Nelson B Bolyard
On 2009-06-25 18:25 PDT, Sudarshan Gaikaiwari wrote: > I am trying to configure NSS on a Windows 2003 machine to work as a JCE > provider under Java 6 in the FIPS mode. I am using the instructions > http://java.sun.com/javase/6/docs/technotes/guides/security/p11guide.html#NSS > > However I am unab

Re: Unable to add softokn3.dll to secmod.db

2009-06-25 Thread Robert Relyea
On 06/25/2009 06:25 PM, Sudarshan Gaikaiwari wrote: Hi I am trying to configure NSS on a Windows 2003 machine to work as a JCE provider under Java 6 in the FIPS mode. I am using the instructions http://java.sun.com/javase/6/docs/technotes/guides/security/p11guide.html#NSS However I am unable to

Unable to add softokn3.dll to secmod.db

2009-06-25 Thread Sudarshan Gaikaiwari
Hi I am trying to configure NSS on a Windows 2003 machine to work as a JCE provider under Java 6 in the FIPS mode. I am using the instructions http://java.sun.com/javase/6/docs/technotes/guides/security/p11guide.html#NSS However I am unable to add modules to the secmod.db. Running the command C:

Re: clarifications on TLS extension "Certificate Status Request"

2009-06-25 Thread Nelson B Bolyard
On 2009-06-22 12:05 PDT, Nagendra Modadugu wrote: > I am currently implementing the "Certificate Status Request" extension > (RFC4366) for NSS. The primary use of this implementation will be > OCSP verification of certificates presented by SSL websites. > > For the general Internet context, I am

Re: S/MIME in Thunderbird

2009-06-25 Thread aerowolf
I really hate the licensing on that add-on, by the way -- it flies in the face of what freedom is, and they call it the "doubly-free" license by removing the freedom associated with the GPL? -Kyle H On Thu, Jun 25, 2009 at 2:31 AM, Gervase Markham wrote: On 24/06/09 23:49, Nelson B Bolyard wr

Re: clarifications on TLS extension "Certificate Status Request"

2009-06-25 Thread Kyle Hamilton
i.e., you're implementing so-called "OCSP Stapling". Thank you. :) If the client requires a specific responderID, and the server knows nothing about it (it's not in its listed stores, either as hash or subjectName), I would think that it normally should return a response indicating failure (OCSP

clarifications on TLS extension "Certificate Status Request"

2009-06-25 Thread Nagendra Modadugu
I am currently implementing the "Certificate Status Request" extension (RFC4366) for NSS.  The primary use of this implementation will be OCSP verification of certificates presented by SSL websites. For the general Internet context, I am unable to find a case where a client should specify a non-em

Re: nsIChannel for internal domains

2009-06-25 Thread Peter Djalaliev
Hi, The images are also fetched through HTTP GET requests, right? "http- on-modify-request" is domain-independent, i.e it will notify you of every outgoing HTTP request, both to websites A and B. For example, assuming that A is the main web server and B is the image server, you should see one or

Re: S/MIME in Thunderbird

2009-06-25 Thread Anders Rundgren
Gervase Markham wrote: The biggest impediment to secure email today is the existence and popularity of webmail. In Mozilla terms, the biggest impediment to Thunderbird today is Firefox. It seems that people are happy to make the trade-off of privacy against convenience here. I suspect it's u

Re: S/MIME in Thunderbird

2009-06-25 Thread Gervase Markham
On 24/06/09 23:49, Nelson B Bolyard wrote: S/MIME's protection of message authenticity, integrity and confidentiality are unbroken and unsurpassed. It is implemented in most Windows, Mac and Linux email MUA's today. But only a small minority of mail users use MUAs that reside on their own compu