Re: OCSP-in-DNS (was Re: For discussion: MECAI: Mutually Endorsing CA Infrastructure)

2011-12-14 Thread Kai Engert

Just a quick thought, that I don't want to lose.

Maybe it would be a reasonable middle-ground to define:
- for intermediate CAs, OCSP information is published in DNS
- for servers, we use OCSP stapling

(Rob, thanks for your response, I'm still digesting.)

Regards
Kai
--
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto


TLS 1.2?

2011-12-14 Thread Christopher Howard
Hi. I was wondering if there was a timeline for TLS 1.2 support in
libnss. I have a strong interest in the TLS extensions (particularly
server_name) as well as, of course, improved security, but I also have a
strong interest in Firefox and Chromium on the client side.

-- 
frigidcode.com
theologia.indicium.us



signature.asc
Description: OpenPGP digital signature
-- 
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto