Re: To NSS-Java or not to NSS-Java, thats the question.

2012-04-17 Thread Martin Paljak
On Tue, Apr 17, 2012 at 16:05, Anders Rundgren wrote: > Exposing NSS, PKCS #11 or PC/SC to downloaded browser code suffers from the > same issues. All the mentioned interfaces are the lowest common denominators to some extent. Also, provisioning shall suffer from lack of interest from involved

Re: To NSS-Java or not to NSS-Java, thats the question.

2012-04-17 Thread Anders Rundgren
On 2012-04-17 14:14, helpcrypto helpcrypto wrote: >> It was for example suggested that PKCS #11 should be exposed as a >> JavaScript object. I think that is downright ridiculous idea, >> almost as bad as: http://www.sconnect.com/FAQ/index.html > > Let me expose two user-cases where i think that w

Re: To NSS-Java or not to NSS-Java, thats the question.

2012-04-17 Thread helpcrypto helpcrypto
> It was for example suggested that PKCS #11 should be exposed as a > JavaScript object.  I think that is downright ridiculous idea, > almost as bad as: http://www.sconnect.com/FAQ/index.html Let me expose two user-cases where i think that will be helpfull (and maybe the only option). -Web page t

Re: To NSS-Java or not to NSS-Java, thats the question.

2012-04-17 Thread Anders Rundgren
On 2012-04-17 11:14, helpcrypto helpcrypto wrote: > So, do you (we) ALL agree NSS should be modified to hook with system > keystores like Windows or OSX? (Linux has no default system keystore, > so there will be no changes by now) > Maybe wtc has something to say against this... > > Are mozilla (w

Re: To NSS-Java or not to NSS-Java, thats the question.

2012-04-17 Thread ianG
On 17/04/12 19:14 PM, helpcrypto helpcrypto wrote: So, do you (we) ALL agree NSS should be modified to hook with system keystores like Windows or OSX? (Linux has no default system keystore, so there will be no changes by now) Maybe wtc has something to say against this... Are mozilla (we) going

Re: To NSS-Java or not to NSS-Java, thats the question.

2012-04-17 Thread helpcrypto helpcrypto
So, do you (we) ALL agree NSS should be modified to hook with system keystores like Windows or OSX? (Linux has no default system keystore, so there will be no changes by now) Maybe wtc has something to say against this... Are mozilla (we) going to see (wait) whats is said on: http://www.w3.org/201

Re: To NSS-Java or not to NSS-Java, thats the question.

2012-04-17 Thread Anders Rundgren
On 2012-04-17 09:06, helpcrypto helpcrypto wrote: >> I would not build a scheme based on NSS because NSS is not a prerequisite >> unless you force people to use Firefox. > We arent forcing. We already support Microsoft, OSX and Google > browsers, and (trying) Firefox too. > >> Hooking Mozilla/NS

Re: To NSS-Java or not to NSS-Java, thats the question.

2012-04-17 Thread helpcrypto helpcrypto
> I would not build a scheme based on NSS because NSS is not a prerequisite > unless you force people to use Firefox. We arent forcing. We already support Microsoft, OSX and Google browsers, and (trying) Firefox too. >  Hooking Mozilla/NSS into native APIs like CryptoAPI is a much more important