Re: Announcing an experimental public S/MIME keyserver

2011-06-17 Thread Kai Engert
On 16.06.2011 13:52, Gervase Markham wrote: On 11/06/11 12:03, Michael Ströder wrote: This means if the user accidently sent in contact information in an e-mail footer this information is also disclosed. If not already there you should put a strong hint on the web page that the signed S/MIME mes

Re: DOMCrypt API developments

2011-06-17 Thread Anders Rundgren
On 2011-06-17 15:31, Jean-Marc Desperrier wrote: > David Dahl wrote: >>> I find this API effort very interesting, however I'm left with the feeling you wish to leave out the use of PKI elements. A really neutral API would work both with and without PKI. >> Public Key crypto is actually

Re: DOMCrypt API developments

2011-06-17 Thread David Dahl
- Original Message - > From: "Jean-Marc Desperrier" > To: mozilla-dev-tech-cry...@lists.mozilla.org > Sent: Friday, June 17, 2011 8:31:03 AM > Subject: Re: DOMCrypt API developments > David Dahl wrote: > >> I find this API effort very interesting, however I'm left with the > >> > feeling

Re: DOMCrypt API developments

2011-06-17 Thread Jean-Marc Desperrier
David Dahl wrote: I find this API effort very interesting, however I'm left with the > feeling you wish to leave out the use of PKI elements. > A really neutral API would work both with and without PKI. Public Key crypto is actually the main use case of this API. I meant more certificate/X50

Proposal: implement a MITM report addon

2011-06-17 Thread Kai Engert
I would like to propose that someone could implement an addon for Mozilla applications with the following functionality: - it comes with a list of several hundred known major services, including https and email servers. - if the user gets a certificate error on one of the major sites, we ch