[dev] OOo Digital Signatures

2006-10-18 Thread Malte Timmermann
Alon, I have followed your discussion in http://www.openoffice.org/issues/show_bug.cgi?id=39382. Thanks for offering help on improving certificate usage :) I just want to make sure that we all know the details: OOo should be a user of PKI infrastructure, but not the maintainer. On Windows it's

Re: [dev] OOo Digital Signatures

2006-10-18 Thread Rene Engelhard
Hi, Am Mittwoch, 18. Oktober 2006 12:00 schrieb Malte Timmermann: > We think that most people on non-Windows platforms will have their > personal certificate in some Mozilla profile anyway. Not true. I had to extra set up to Mozilla and import a test-generated certificate to test the XML Sec stuf

Re: [dev] OOo Digital Signatures

2006-10-18 Thread Mathias Bauer
Rene Engelhard wrote: > We should try to get rid of the Mozilla crap If you want to be taken serious you should stop to use offending words like the ones above. If you have some valid complaints about Mozilla or the way how we use you can do this in a civilized manor. The problem is not Mozilla

Re: [dev] OOo Digital Signatures

2006-10-18 Thread Oliver Braun
Hi Malte, Malte Timmermann wrote: On other platforms there is no global key store, that's the reason why we have chosen to rely on a Mozilla profile. what about GNOME keyring, Apple KeyChain, .. ? I think this assumption is no longer valid. - Oliver -

Re: [dev] OOo Digital Signatures

2006-10-19 Thread Frank Schönheit - Sun Microsystems Germa ny
Hi Rene, > We should try to get rid of the Mozilla crap (remember: we still are shipping > a > unmaintained, old, unsupported, security-buggy version), also for LDAP > access, but > that's an other story... Glad to hear you volunteer to work on this, it is definitely most welcome. For both the

Re: [dev] OOo Digital Signatures

2006-10-19 Thread Malte Timmermann
You might be true about Apple (which is not in my personal focus - any volunteers?), but some GNOME stuff doesn't help for people using KDE or other things... Malte. Oliver Braun wrote, On 10/19/06 08:55: > Hi Malte, > > Malte Timmermann wrote: >> On other platforms there is no global key store,

Re: [dev] OOo Digital Signatures

2006-10-19 Thread Joachim Lingner
The area of certificate verification is very complex. There are different RFCs and other specifications, as well as different requirements in separate countries (e.g. German Signature Law). I haven't seen so far a statement that either Microsoft or Mozilla guarantee 100 % compliance to a partic

Re: [dev] OOo Digital Signatures

2006-10-19 Thread Rene Engelhard
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, Mathias Bauer wrote: > Rene Engelhard wrote: > > > We should try to get rid of the Mozilla crap > > If you want to be taken serious you should stop to use offending words > like the ones above. If you have some valid complaints about Mozilla or

Re: [dev] OOo Digital Signatures

2006-10-19 Thread Rene Engelhard
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, Frank Schönheit - Sun Microsystems Germany wrote: > > We should try to get rid of the Mozilla crap (remember: we still are > > shipping a > > unmaintained, old, unsupported, security-buggy version), also for LDAP > > access, but > > that's an ot

Re: [dev] OOo Digital Signatures

2006-10-19 Thread Oliver Braun
The mozilla stuff doesn't help konqueror/kmail users as well. And we already do a lot of other things differently in certain desktop environments. The best solution would be if OOo could access both kinds of key stores either concurrently or by user's choice. We may even find volunteers to im

Re: [dev] OOo Digital Signatures

2006-10-19 Thread Eike Rathke
Hi Malte, On Thursday, 2006-10-19 09:53:52 +0200, Malte Timmermann wrote: > You might be true about Apple (which is not in my personal focus - any > volunteers?), but some GNOME stuff doesn't help for people using KDE or > other things... GnuPG, window manager independent, runs on quite a few pl

Re: [dev] OOo Digital Signatures

2006-10-22 Thread Mathias Bauer
Rene Engelhard wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Hi, > > Mathias Bauer wrote: >> Rene Engelhard wrote: >> >> > We should try to get rid of the Mozilla crap >> >> If you want to be taken serious you should stop to use offending words >> like the ones above. If you have