Re: Unbelievable!

2009-01-06 Thread timeless
On Dec 31 2008, 12:28 am, "Kyle Hamilton" wrote: > (note: "unknown_issuer" without talking at all about who the issuer > claims to be you're missing a critical point: the issuer is something about which we know nothing. someone could claim "issuer: GOD" or "issuer: POTUS" or "issuer: VeriSign".

Re: Unbelievable!

2009-01-06 Thread timeless
On Dec 25 2008, 12:36 am, "Kyle Hamilton" wrote: > To be honest, Mozilla doesn't distribute keytool with Firefox, which > means that I have to try to go into the > (unbatchable) interface this is false. the ui is built as xul with js bindings to c++ objects which use idl to expose methods. the j

Re: SSL in asynchronous proxy

2007-08-21 Thread timeless
I wish umesh would reply in thread instead of randomly posting new threads. *grumble* On Aug 19, 5:04 am, Nelson B <[EMAIL PROTECTED]> wrote: > How do you plan to defeat the MITM detection in the products you intend > to attack? Do you plan to plant a bogus root CA cert in them? > If so, how do y

Re: SSL in asynchronous proxy

2007-08-21 Thread timeless
Nelson: please trust us. the product has specific design constraints. the purpose is to allow for mozilla to sit between e.g. MSIE or Acrobat Reader and a web server, analyze the stream and then do something based on it. The only way that this works is for MSIE or whatever to *install* a certific

Re: Revision of Contributors Agreement

2007-03-16 Thread timeless
On Mar 14, 1:18 pm, Gervase Markham <[EMAIL PROTECTED]> wrote: > The new proposed draft is here:http://wiki.mozilla.org/Contributor_Form > > I am drawing this to the attention of the Mozilla cryptography community > especially, because the document contains a section (Section 5) which > explicitly

Re: Sftp extension for Firefox

2007-03-01 Thread timeless
On Feb 28, 3:53 pm, [EMAIL PROTECTED] wrote: > Timeless: Is this what you mean? I write JS code for the GUI bit. So I > have a box with a username and password prompt and a "GO" button. So > now JS has no Sftp(SSH) support so it has to get it from somewhere > else. > >

Re: Sftp extension for Firefox

2007-03-01 Thread timeless
On Mar 1, 8:50 am, [EMAIL PROTECTED] wrote: > The next thing now is to make Mozilla somehow understand that it has > to just try and call this C++ code. No SFTP functionality will be > written here. As soon as the user enters "username" and "password" and > hits "GO" the entire C++ code is called a

Re: Sftp extension for Firefox

2007-02-26 Thread timeless
On Feb 24, 7:07 am, [EMAIL PROTECTED] wrote: > Am brand new to writing extensions for Firefox. I was looking at > FireFTP and it looked like it didnt have support for Sftp. So I > thought I would try and write one. > I did go through quite a few pages on "How to write extensions". My > question th

Re: mxr.mozilla.org

2007-02-07 Thread timeless
On Feb 7, 10:43 pm, Ben Bucksch <[EMAIL PROTECTED]> wrote: > OK, you know bugzilla, right? File a bug. in this case, there's no need for a bug. bugzilla is run by the same admins who would run the script required to correct mxr. unfortunately, the admin needs to spend time on bugzilla (it needs

Re: hard coded PK11 mechanisms?

2006-11-29 Thread timeless
Jim Spring wrote: > I've checked the PKCS11 FAQ and it doesn't list all of them, > so I was curious if there is a definitive list of the hard > coded mechanisms that Firefox (and Thunderbird) use? For > instance, KeyGen uses CKM_RSA_PKCS. I'm looking for a short > cut to trudging through the sour

Re: patches

2006-11-04 Thread timeless
> To create a patch, you should always use the "cvs diff -u" command, IMO. cvs diff -up is better :) ___ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto