Re: can security be elevated for a page?

2009-10-16 Thread Boris Zbarsky
On 10/16/09 4:39 PM, Grant Gayed wrote: The IE implementations of this are IInternetSecurityManager.MapUrlToZone() (for embedders) and the Mark Of The Web (for pages). Do equivalents for either of these exist in the Mozilla world? Not really, though for a particular page you could probably int

can security be elevated for a page?

2009-10-16 Thread Grant Gayed
Hi, (sorry if I'm missing an obvious interface or service, please just give me a pointer if this is the case) Our app embeds XULRunner, and I am wondering if a page can be viewed with a more strict security level than it would normally have. For example, by default a page that lives on the local

Re: OCSP responder key/certificate thoughts

2009-10-16 Thread Jean-Marc Desperrier
Kyle Hamilton wrote: I'm trying to figure out how much of the OCSP slowness and server underpowering is due to the sizes of the keys used, or limitations of the HSMs (and drivers) that these systems are using. I think little, but I might be wrong. If there's really a problem at this level, I w