Firefox Sync, Key Exchange/Entry, and FIPS (was Re: NSS linkage and FIPS-140 compliance for Firefox)

2010-10-20 Thread Brian Smith
> Brian Smith wrote: > > (Because of Firefox Sync, we are now always going to have crypto > > features that won't work in FIPS mode.) > Sigh, ignoring FIPS mode in a feature, is usually a red flag. It means > you are handling CSP's where you really shouldn't be. Firefox Sync > *CAN* be implemented

Usage of FreeBL and FreeBL/mpi through JavaScript in Firefox 4 Sync

2010-10-20 Thread Brian Smith
See https://bugzilla.mozilla.org/show_bug.cgi?id=601645. The following internal functions and data structures in FreeBL that would be used Firefox 4.0 Sync's J-PAKE implementation through JSCtypes (a mechanism for calling native code through Javascript). I personally would like to find a way t

Re: Thunderbird: "Could not verify this certificate for unknown reasons"

2010-10-20 Thread Nelson B Bolyard
On 2010-10-20 09:54 PDT, Matej Kurpel wrote: > Hello, > I have set up my own CA and issued one certificate signed by this CA. > However, I cannot use this certificate to send signed e-mail from > Thunderbird. It says "Could not verify this certificate for unknown > reasons". PSM's infamous "fo

Re: NSS linkage and FIPS-140 compliance for Firefox

2010-10-20 Thread Robert Relyea
On 10/18/2010 05:06 PM, Brian Smith wrote: > [I cannot participate in any legal discussions now. Please don't ask > me questions about legal stuff.] > > We (Mozilla) are are exploring some approaches to statically link NSS > into Firefox to reduce dynamic linkage overhead caused by the NSS > share

Re: Discussion forums anti-spam: configuration change

2010-10-20 Thread Nelson B Bolyard
On 2010-10-19 01:23 PDT, Gervase Markham wrote: > At 11pm Pacific Time on Tuesday night (6am UTC on Wednesday morning) we > are implementing[0] the new discussion forums anti-spam plan[1] on the > following guinea pig groups: > > mozilla.community.philippines > mozilla.governance.mpl-update > mo

Thunderbird: "Could not verify this certificate for unknown reasons"

2010-10-20 Thread Matej Kurpel
Hello, I have set up my own CA and issued one certificate signed by this CA. However, I cannot use this certificate to send signed e-mail from Thunderbird. It says "Could not verify this certificate for unknown reasons". I don't understand; I have added the root CA certificate into the Authori