Re: Shared system database

2012-07-25 Thread Julien Pierre
Anders. On 7/24/2012 23:33, Anders Rundgren wrote: Yes. It's an issue I'm actively trying to solve. NSS seems to have made some *attempt* at solving it... which has some issues, and which doesn't even seem to have been picked up by Mozilla's own products. For the record, some Oracle server produ

Re: Shared system database

2012-07-25 Thread David Woodhouse
On Wed, 2012-07-25 at 22:05 +0200, Anders Rundgren wrote: > Apple will embed security HW directly in the CPU and there will be > no need for any third-party middleware. It will just work. I believe the first Intel Apple laptops had a TPM. It was dropped fairly quickly, and current models don't ha

Re: Shared system database

2012-07-25 Thread Anders Rundgren
On 2012-07-25 11:32, helpcrypto helpcrypto wrote: >> As I understand it, PKCS#11 token support was actually *removed* from >> the Keychain in the latest versions of OSX, and is now a third-party >> add-on? > > IIRC: Apple said smartcard services are not going to be suportted by > them, but the com

Re: Shared system database

2012-07-25 Thread David Woodhouse
On Wed, 2012-07-25 at 08:59 +0200, helpcrypto helpcrypto wrote: > > You are asking for: (paths are just for example purposes) > a) To set up a $HOME/nss to store user certs + trusted by the user > (actually more/less what already have). Doesnt Chrome use something > like that already? > b) To se

Re: Shared system database

2012-07-25 Thread helpcrypto helpcrypto
> As I understand it, PKCS#11 token support was actually *removed* from > the Keychain in the latest versions of OSX, and is now a third-party > add-on? IIRC: Apple said smartcard services are not going to be suportted by them, but the community (macosforge). Apple didnt provide a supported altern

Re: Shared system database

2012-07-25 Thread David Woodhouse
On Wed, 2012-07-25 at 08:33 +0200, Anders Rundgren wrote: > I think the lack of progress [*] here has a lot to do with the fact that > there's really nothing to gather around. Making security solutions > for security-conscious people is probably quite fun but since this > only addresses a tiny fra