Re: Scope of Dev-Security List

2013-09-24 Thread Brian Smith
On Tue, Sep 24, 2013 at 10:35 AM, Sid Stamm wrote: > On 09/17/2013 02:14 AM, Michael Coates wrote: > > I'm very curious to hear your thoughts on the intended scope of this > > list. Do you consider this list for discussions just on security > > elements impacting Firefox? Or would you expect secu

Re: Scope of Dev-Security List

2013-09-24 Thread Sid Stamm
On 09/17/2013 02:14 AM, Michael Coates wrote: > I'm very curious to hear your thoughts on the intended scope of this > list. Do you consider this list for discussions just on security > elements impacting Firefox? Or would you expect security discussion on > other Mozilla initiatives to be discusse

Re: Security error when trying to set a non SSL/TLS Websocket from a https page

2013-09-24 Thread Aymeric Vitte
I don't want to get you started but look: From your own site (!! probably a mistake in the link) https://www.financialcryptography.com/ :-) or https://iang.org/ And maybe when you have time http://www.ianonym.com where it's explained why you might not trust SSL/TLS But I don't want to debat

Re: Security error when trying to set a non SSL/TLS Websocket from a https page

2013-09-24 Thread ianG
On 23/09/13 12:16 PM, Aymeric Vitte wrote: Le 23/09/2013 10:42, ianG a écrit : And yes, once HTTPS is indicated on the original request, it has to maintain SSL/TLS protection across the lot, otherwise the security claim is broken. That's not the case already, I agree. The situation is tha