On Thu, Feb 16, 2017 at 3:44 AM, Gervase Markham <g...@mozilla.org> wrote: > There seemed to be some confusion recently in m.d.s.policy about whether > NSS, and then Firefox, supported P-521 for server auth certs. Can > someeone clear it up for me and tell me what the situation is? :-)
Sure. Both NSS and Firefox support P-521. We still accept TLS handshakes that use it (for both key exchange and signing). I believe that it is also supported in webcrypto. I believe that Chrome doesn't support P-521 in TLS. We tried to follow them, but only briefly. -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto