Re: sec_error_unknown_issuer

2015-09-09 Thread Frederik Braun
I too get the security warning. The ssllabs.com test usually helps uncovering the issue behind this: According to it seems that the website is configured incorrectly. In particular, it appears to me that the ce

Re: High CPU usage when acccessing internal devices that do not have externally validated certificates

2014-10-06 Thread Frederik Braun
This message has spread over multiple threads. Brian Smith already pointed out that this is already known: On 06.10.2014 15:05, Patrick McManus wrote: > Hi Phil, this is probably something the pkix team should look at. can you > file a bug und

Re: Getting Started

2014-10-05 Thread Frederik Braun
introduces you to building and modifying Firefox. If you think you are ready to go fixing things, you can also check out Bugs Ahoy which contains a list of bugs marked as "easy first bug" that have a mentor who will help you getting

Re: Intent to unimplement: proprietary window.crypto functions/properties

2014-06-27 Thread Frederik Braun
To be frank, I have only ever seen the non-standard crypto functions used in attacks, rather than in purposeful use. +1 to unimplement. On 26.06.2014 22:40, David Keeler wrote: > [dev.platform cc'd for visibility - please follow-up to dev.tech.crypto] > > Summary: > We intend to remove the propr

additional SSL/TLS connection info (Re: Regain trust into SSL/TLS)

2014-03-11 Thread Frederik Braun
On 09.03.2014 23:59, Raphael Wegmann wrote: > Yes, it is possible to check the certificate (or the fingerprint), > but who does that? Apropos, why is the SHA1 and MD5 fingerprint > hidden behind 3 clicks? Can't we add some visual fingerprint in > the window that pops up, when I click the lock symbo

Re: Hashing functions in Firefox OS

2014-01-15 Thread Frederik Braun
On 15.01.2014 14:32, Kai Engert wrote: > It's not clear why you need something new. > > I'd assume your device locking code is privileged code. > Can't you use nsICryptoHash? There is no privileged JS in FxOS as there is in Firefox Desktop :) All code must be an open web API. -- dev-tech-crypto