Re: Using of HTML keygen element

2010-03-31 Thread Thomas Zangerl
Anders, On Mar 30, 10:57 pm, Anders Rundgren wrote: > > Good to hear, thanx. > > Doesn't that also mean that anybody can enumerate your CSPs without your > knowledge? no, IE still says "The site is attempting to perform a certificate operation, allow (yes/no)" when enumerating the CSPs. The onl

Re: Using of HTML keygen element

2010-03-30 Thread Thomas Zangerl
On Mar 30, 4:39 pm, Thomas Zangerl wrote: > to do it (can be painful) and it create standard PKCS#7 CSRs. Keygen I meant "creates PKCS#10 CSRs". Need more coffee :) -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto

Re: Using of HTML keygen element

2010-03-30 Thread Thomas Zangerl
On Mar 30, 12:53 pm, Anders Rundgren wrote: > It might be interesting to note how this works in MSIE since few > CAs can completely ignore MSIE even if they wanted to: > > "" a la Microsoft: > > It starts by the poor user trying to get the enroll ActiveX object > to run *by reducing security until

Re: Using of HTML keygen element

2010-03-30 Thread Thomas Zangerl
On Mar 30, 12:23 pm, Jean-Marc Desperrier wrote: > The most adequate group for this discussion would be mozilla.dev.tech.crypto > > I agree than enhancing generateCRMFRequest to let it generate a more > usual format instead of only CRMF would be a big step forward. > > And making more obvious that