Re: Firefox security too strict (HSTS?)?

2015-09-15 Thread AnilG
Thanks Gerv, I take your point. I think I do get a list of user certs from Keychain on Mac but I suppose that may not modify your response from a coding point of view. My point is that Firefox will be no good for the web if no one is using it. 1. I have seen Firefox go from recommended browser

Re: Policy Update Proposal: Remove Code Signing Trust Bit

2015-09-15 Thread R Kent James
On 9/14/2015 9:47 AM, Kathleen Wilson wrote: Anyways, let's not discuss the Email trust bit in this particular discussion thread. I would like to keep this particular discussion focused on the policy proposal to remove the Code Signing trust bit. We will have a separate discussion about the

Re: Remove Roots used for only Email and CodeSigning?

2015-09-15 Thread Gervase Markham
On 11/09/15 22:06, Rob Stradling wrote: > On 11/09/15 13:05, Gervase Markham wrote: >> On 08/09/15 10:54, Rob Stradling wrote: >>> Assuming this is still Mozilla's plan, please would you clarify which >>> versions of Firefox and Thunderbird will be (or were?) the first >>> versions that won't

Re: Firefox security too strict (HSTS?)?

2015-09-15 Thread Gervase Markham
On 15/09/15 01:12, Anil Gulati wrote: > To remove unnecessary impediments to Firefox use and adoption wouldn't it > make sense to configure Firefox to use the OS cert store by default, and > allow an option to use internal cert database? We would love it if the OS would give us a list of _just_

Re: Policy Update Proposal: Remove Code Signing Trust Bit

2015-09-15 Thread Kathleen Wilson
On 9/15/15 5:42 AM, Peter Kurrasch wrote: So is Mozilla becoming, in effect, just a browser company?‎ If email is de-prioritized and code signing is on life support, that would be good to know before getting too bogged down with issues that aren't necessarily important to Mozilla. I'm just

Re: Policy Update Proposal: Remove Code Signing Trust Bit

2015-09-15 Thread Peter Kurrasch
So is Mozilla becoming, in effect, just a browser company?‎ If email is de-prioritized and code signing is on life support, that would be good to know before getting too bogged down with issues that aren't necessarily important to Mozilla. I'm just trying to understand where the boundaries are.