Re: AES-256 vs. AES-128

2015-11-25 Thread Reed Loden
Other recommended reading when discussing this: https://crypto.stackexchange.com/questions/5118/is-aes-256-weaker-than-192-and-128-bit-versions https://www.schneier.com/blog/archives/2009/07/another_new_aes.html https://www.reddit.com/r/crypto/comments/39211m/is_really_aes256_less_secure_than_ae

Re: Proposal: Disable SSLv3 in Firefox ESR 31

2014-10-20 Thread Reed Loden
On Tue, 21 Oct 2014 01:40:45 +0200 Kai Engert wrote: > On Thu, 2014-10-16 at 20:51 +0200, Kai Engert wrote: > > Do you claim that Firefox 34 will continue to fall back to SSL 3 when > > necessary? > > Yes. If I understand correctly, it seems that Firefox indeed still falls > back to SSL3, even w

Re: Proposal: Disable SSLv3 in Firefox ESR 31

2014-10-16 Thread Reed Loden
On Thu, 16 Oct 2014 20:27:24 +0200 Florian Weimer wrote: > * Richard Barnes: > > > If there are any objections or comments on that proposal, please > > raise them in this thread. > > A lot of this has already been hashed out on the IETF TLS WG mailing > list, with a slightly different perspecti

Re: Memory leak fixes

2010-04-07 Thread Reed Loden
I'm sure the NSS and NSPR developers would love to review them. https://developer.mozilla.org/en/Getting_your_patch_in_the_tree has some good information on how to get your patch landed. Let us know if you have any questions. Thanks again for your contribution! ~reed [0] https://bugzilla.m

Re: Improper SSL certificate issuing by CAs

2010-04-01 Thread Reed Loden
27;t that hard. I filed this as https://bugzilla.mozilla.org/show_bug.cgi?id=556468 for (any) investigation tracking. ~reed -- Reed Loden - -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto

Fw: [oss-security] Using NSS (Netscape Security Services) in setuid programs

2009-08-23 Thread Reed Loden
SS to establish a TLS connection for authentication purposes, this allows a local attacker to enable features which make it easier to impersonate the authentication server. I couldn't find any programs which might suffer from such a problem, though. -- Reed Loden - -- dev-tech-crypto mailing lis

Re: Must take down the news/mail gateway until spam abates

2009-02-24 Thread Reed Loden
On Tue, 24 Feb 2009 05:22:35 -0600 Reed Loden wrote: > I've filed https://bugzilla.mozilla.org/show_bug.cgi?id=479949 to track this > issue, ... Apparently, I didn't notice https://bugzilla.mozilla.org/show_bug.cgi?id=425122 when filing, so I've duped the above bug t

Re: Must take down the news/mail gateway until spam abates

2009-02-24 Thread Reed Loden
on (or at least a stop-gap) to this very annoying problem, as we know it affects the ability to just get work done. Thanks for your patience in this matter. ~reed, wearing my Mozilla SysAdmin hat -- Reed Loden - -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists

Re: OT: mozilla.org domain ownership

2009-01-15 Thread Reed Loden
icate for *.mozilla.org? The O= is currently Mozilla Corporation, rather than Mozilla Foundation. ~reed -- Reed Loden - ___ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto

Re: [Fwd: Follow-Up on www.verisign.com SSL Order]

2008-12-28 Thread Reed Loden
On Sun, 28 Dec 2008 22:13:53 +0200 Eddy Nigg wrote: > On 12/28/2008 09:45 PM, Reed Loden: > > > > You can use any e-mail address as a Google Account, so yes, I > > really think so. Patricia's reply confirms this, too. > > > > Reed, Servage is a hosting

Re: [Fwd: Follow-Up on www.verisign.com SSL Order]

2008-12-28 Thread Reed Loden
On Sun, 28 Dec 2008 11:47:49 +0100 Michael Ströder wrote: > Reed Loden wrote: > > On Sat, 27 Dec 2008 13:55:45 +0100 > > Michael Ströder wrote: > > > >> 3. Strange from address with another famous trademark as local part > >> used in another posting h

Re: [Fwd: Follow-Up on www.verisign.com SSL Order]

2008-12-27 Thread Reed Loden
ubmitting to the newsgroups via Google Groups, and I bet her google account is the address used in the post to which you're referring. She probably just forgot to change it to her work address before sending. I wouldn't fault her or her company for this "mistake" in any way. ~r