Re: Do big parts of security in "mozilla" suck?

2009-07-23 Thread Udo Puetz
your help and inputs, regards Udo Puetz P.s.: I haven't seen anything on the main page of this group that it shall only deal with NSS. Maybe Nelson or someone could write that into the description of this group. -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://li

Re: Do big parts of security in "mozilla" suck?

2009-07-23 Thread Udo Puetz
On 23 Jul., 11:56, Nelson B Bolyard wrote: Hello Nelson > As for Udo's rants, Udo has reported that two of the users he was trying > to help have subsequently resolved their own problems without his help. > Maybe Udo is just unhappy that he had more problems with this stuff than > the users he w

Re: Do big parts of security in "mozilla" suck?

2009-07-23 Thread Udo Puetz
omething OS independant because they all have this or that feature in common. Or you can tell them how the other OS does it and influence them or something. > > -work together with opensc folks. > > I don't see a problem here. I'm on the OpenSC lists too. OpenSC and NSS >

Re: Do big parts of security in "mozilla" suck?

2009-07-23 Thread Udo Puetz
e sources) That certain business types don't get it was to be expected - but I would have thought (hoped) that the mozilla folks and their supporters "got" it. Oh well, that's live, hmm? Thanks all Regards, Udo Puetz P.s.: have you seen that Microsoft released two packages of software under the GPL within 3 days? Not so long ago the GPL was "the evil", wasn't it? Times change... -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto

Re: Do big parts of security in "mozilla" suck?

2009-07-22 Thread Udo Puetz
-work together with opensc folks. -generally: useful and correct error messages!! How about these ideas? Regards Udo Puetz > -- > Regards > > Signer: Eddy Nigg, StartCom Ltd. > Jabber: start...@startcom.org > Blog:  https://blog.startcom.org -- dev-tech-crypto ma

Re: Do big parts of security in "mozilla" suck?

2009-07-21 Thread Udo Puetz
On 20 Jul., 12:04, Ian G wrote: > On 20/7/09 09:18, Udo Puetz wrote: > > > From a usability point of view I would consider the WHOLE > > thing to be a nightmare. I intended to write up a howto, gave that up > > now for the time being. > > And by the way: ASN1

Re: Do big parts of security in "mozilla" suck?

2009-07-20 Thread Udo Puetz
t...? Anyway, thanks for your efforts, I consider the whole thing for the time being as not usable and recommendable. Regards Udo Puetz -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto

Re: Do big parts of security in "mozilla" suck?

2009-07-16 Thread Udo Puetz
etty high that the result won't be 100% the same but maybe I can try the above. We have a new co-worker who doesn't have a thawte cert yet - so I will try there. I'll let you know if it worked. Regards Udo Puetz > -- > Regards > > Signer: Eddy Nigg, StartCom Ltd. &

Re: Do big parts of security in "mozilla" suck?

2009-07-15 Thread Udo Puetz
01CA0528.0E8701C0 Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" So, either thunderbird lies about the message being signed or I don't get it. Shall I forw

Re: Do big parts of security in "mozilla" suck?

2009-07-15 Thread Udo Puetz
On 15 Jul., 16:12, Jean-Marc Desperrier wrote: > Udo Puetz wrote: > > I've recently written about a windows firefox hardware token problem > > (see list) and didn't get a solution before the discussion drifted off > > into universalities. Problem not solved, custom

Re: Do big parts of security in "mozilla" suck?

2009-07-15 Thread Udo Puetz
a lack of knowledge on my side. That still leaves a lot of points open though. E.g.: error messages (when trying to import) could actually make sense. Regards Udo Puetz -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto

Do big parts of security in "mozilla" suck?

2009-07-15 Thread Udo Puetz
wledge should be employed by mozilla fulltime - or what does mozilla do with the (IIRC) 20 Mio$ it got from google for the firefox google search site? That's why I think that big parts of security suck in "mozilla". Regards Udo Puetz -- dev-tech-crypto mailing list dev-tech-cry

Re: Problem reading certificate from hardware token

2009-07-03 Thread Udo Puetz
w trying to import the CA onto the token. As seen above the p12 file includes both the CA cert and the user cert. But if one imports it with the safenet ikey token utility the CA cert file seems to get lost. This seems now to be a problem with the token import utility. Do you agree? Or should firefox accept a CA cert and user cert from different stores? Thanks a lot again for your help regards Udo Puetz -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto

Re: Problem reading certificate from hardware token

2009-07-03 Thread Udo Puetz
o, maybe I can dig out a log or something there too. Thanks a lot, regards Udo Puetz P.s.: I normally use linux systems and OS X, but from what I saw till now I think ALL OSs suck when dealing with cryto tokens and such. And don't get me started on RSA SecurID tokens and vista...But let's

Problem reading certificate from hardware token

2009-07-02 Thread Udo Puetz
th the safenet folks) Thanks a lot, regards Udo Puetz -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto