Re: Intent to unimplement: proprietary window.crypto functions/properties

2014-10-30 Thread pieterjan
> Maybe because the removal wasn't proposed at that time? Now there is a > proposal to remove something that has no working (not even standardized) > successor. Also, people using this stuff are really far away from W3C. Firefox had a competitive advantage in supporting this. It would have been w

Re: Intent to unimplement: proprietary window.crypto functions/properties

2014-06-30 Thread Matthias Hunstock
Am 27.06.2014 18:32, schrieb Brian Smith: > However, I think that is a good idea anyway, because Firefox (and > Thunderbird) should be using the native OS for client certificates and > S/MIME certificates anyway. Additionally or exclusive? When I think of using smartcard-based client certificates

Re: Intent to unimplement: proprietary window.crypto functions/properties

2014-06-30 Thread helpcrypto helpcrypto
On Fri, Jun 27, 2014 at 6:32 PM, Brian Smith wrote: Hi > The issue is that the WebCrypto API uses a totally separate keystore from > the X.509 client certificate keystore (if it doesn't, it should be), and > the stuff that Red Hat does is about client certificates. AFAICT, WebCrypto > doesn't

Re: Intent to unimplement: proprietary window.crypto functions/properties

2014-06-27 Thread Brian Smith
On Fri, Jun 27, 2014 at 9:19 AM, David Keeler wrote: > On 06/27/2014 07:37 AM, Nathan Kinder wrote: > > On 06/27/2014 12:13 AM, Frederik Braun wrote: > >> To be frank, I have only ever seen the non-standard crypto functions > >> used in attacks, rather than in purposeful use. > > > > That doesn't

Re: Intent to unimplement: proprietary window.crypto functions/properties

2014-06-27 Thread David Keeler
On 06/27/2014 07:37 AM, Nathan Kinder wrote: > On 06/27/2014 12:13 AM, Frederik Braun wrote: >> To be frank, I have only ever seen the non-standard crypto functions >> used in attacks, rather than in purposeful use. > > That doesn't mean that aren't being purposefully used. The current > crypto f

Re: Intent to unimplement: proprietary window.crypto functions/properties

2014-06-27 Thread David Keeler
orking draft of webcrypto: http://www.w3.org/TR/WebCryptoAPI/ It's not a drop-in replacement for the current window.crypto functions, but it can be used to implement much of the same functionality (in particular, there are some key import/export/etc. functions). My understanding is the spec isn'

Re: Intent to unimplement: proprietary window.crypto functions/properties

2014-06-27 Thread Nathan Kinder
lity. -NGK [1] http://dogtagpki.org/wiki/PKI_Main_Page > > +1 to unimplement. > > On 26.06.2014 22:40, David Keeler wrote: >> [dev.platform cc'd for visibility - please follow-up to dev.tech.crypto] >> >> Summary: >> We intend to remove the propr

Re: Intent to unimplement: proprietary window.crypto functions/properties

2014-06-27 Thread Jürgen Brauckmann
David Keeler schrieb: > Meanwhile, we are making progress on implementing the webcrypto > specification[3]. When complete, webcrypto should provide compatible > functionality for what these functions are currently being used to do. > Any functionality not implementable using webcrypto is available

Re: Intent to unimplement: proprietary window.crypto functions/properties

2014-06-27 Thread Frederik Braun
end to remove the proprietary window.crypto functions and > properties. See > https://developer.mozilla.org/en-US/docs/JavaScript_crypto for what will > be affected by this change. > Our reasoning is as follows: These functions have never been (and never > will be) standardized. The imp

Re: Intent to unimplement: proprietary window.crypto functions/properties

2014-06-26 Thread Ehsan Akhgari
Firefox 33. Cheers, Ehsan On 2014-06-26, 1:40 PM, David Keeler wrote: [dev.platform cc'd for visibility - please follow-up to dev.tech.crypto] Summary: We intend to remove the proprietary window.crypto functions and properties. See https://developer.mozilla.org/en-US/docs/JavaScript_crypt

Intent to unimplement: proprietary window.crypto functions/properties

2014-06-26 Thread David Keeler
[dev.platform cc'd for visibility - please follow-up to dev.tech.crypto] Summary: We intend to remove the proprietary window.crypto functions and properties. See https://developer.mozilla.org/en-US/docs/JavaScript_crypto for what will be affected by this change. Our reasoning is as follows:

Re: window.crypto functions

2008-02-20 Thread Eddy Nigg (StartCom Ltd.)
Hi Bob, Robert Relyea wrote: > I think you need to be running a chrome to access this function > however;(. I don't think your average website can use it. If Firefox is considered an average and common browser than it's pretty usable. For MSIE we've got activeX (so I'm not the MS guy, don't ask

Re: window.crypto functions

2008-02-20 Thread Eddy Nigg (StartCom Ltd.)
Robert Relyea wrote: > > There are lots of APIs to get lots of data about smart cards, but just > like there are lots of APIs to do crypto, the aren't all available to > web designers through java script. Oh, it works excellent with Javascript in Firefox (and most derivatives I guess). Subrata

Re: window.crypto functions

2008-02-20 Thread Robert Relyea
Eddy Nigg (StartCom Ltd.) wrote: Subrata Mazumdar wrote: Eddy, I think that you can do it. Have you looked into nsIPK11Token interface (http://lxr.mozilla.org/mozilla1.8.0/source/security/manager/ssl/public/nsIPK11Token.idl) ? The nsIPK11Token interface would allow you to filter tokens bas

Re: window.crypto functions

2008-02-20 Thread Robert Relyea
Nelson Bolyard wrote: Robert Relyea wrote, On 2008-02-19 14:20: Eddy Nigg (StartCom Ltd.) wrote: Does anybody know if and which parameters might be obtained by the window.crypto functions and smart cards? For reference see this page: http://developer.mozilla.org/en/docs

Re: window.crypto functions

2008-02-19 Thread Eddy Nigg (StartCom Ltd.)
Subrata Mazumdar wrote: > Eddy, > I think that you can do it. Have you looked into nsIPK11Token interface > (http://lxr.mozilla.org/mozilla1.8.0/source/security/manager/ssl/public/nsIPK11Token.idl) > > ? > The nsIPK11Token interface would allow you to filter tokens based on a > number of attri

Re: window.crypto functions

2008-02-19 Thread Nelson Bolyard
Robert Relyea wrote, On 2008-02-19 14:20: > Eddy Nigg (StartCom Ltd.) wrote: >> Does anybody know if and which parameters might be obtained by the >> window.crypto functions and smart cards? For reference see this page: >> http://developer.mozilla.org/en/d

Re: window.crypto functions

2008-02-19 Thread Subrata Mazumdar
determine the desired token is present. -- Subrata Eddy Nigg (StartCom Ltd.) wrote: > Does anybody know if and which parameters might be obtained by the > window.crypto functions and smart cards? For reference see this page: > http://developer.mozilla.org/en/docs/JavaScri

Re: window.crypto functions

2008-02-19 Thread Eddy Nigg (StartCom Ltd.)
Robert Relyea wrote: > No, the API does not give you direct information about how many or > which tokens are installed. Typically that information is gleened by > doing a 'request/not require' client auth. I obviously know what client auth is, but what is "'request/not require' client auth"? >

Re: window.crypto functions

2008-02-19 Thread Robert Relyea
Eddy Nigg (StartCom Ltd.) wrote: Does anybody know if and which parameters might be obtained by the window.crypto functions and smart cards? For reference see this page: http://developer.mozilla.org/en/docs/JavaScript_crypto#Handling_Smart_Card_Events Specifically I'd like to know if

Re: window.crypto functions

2008-02-19 Thread Eddy Nigg (StartCom Ltd.)
Hi Nelson, Nelson Bolyard wrote: > Eddy Nigg (StartCom Ltd.) wrote, On 2008-02-18 08:09: > >> Does anybody know if and which parameters might be obtained by the >> window.crypto functions and smart cards? For reference see this page: >> http://developer.mozilla.org/e

Re: window.crypto functions

2008-02-19 Thread Nelson Bolyard
Eddy Nigg (StartCom Ltd.) wrote, On 2008-02-18 08:09: > Does anybody know if and which parameters might be obtained by the > window.crypto functions and smart cards? For reference see this page: > http://developer.mozilla.org/en/docs/JavaScript_crypto#Handling_Smart_Card_Events > &g

window.crypto functions

2008-02-18 Thread Eddy Nigg (StartCom Ltd.)
Does anybody know if and which parameters might be obtained by the window.crypto functions and smart cards? For reference see this page: http://developer.mozilla.org/en/docs/JavaScript_crypto#Handling_Smart_Card_Events Specifically I'd like to know if there is a function to check if a