Re: Usage of FreeBL and FreeBL/mpi through JavaScript in Firefox 4 Sync

2010-10-24 Thread Jean-Marc Desperrier
On 22/10/2010 19:07, Brian Smith wrote: > Speaking only for myself, I have no objection to offering the mp_int > bignum API as a "public" API out of freebl3. If people are open to having the J-PAKE building blocks in FreeBL, then we wouldn't need MPI to be part of the public API. The main conc

Re: Thunderbird: "Could not verify this certificate for unknown reasons"

2010-10-24 Thread Matej Kurpel
On 23. 10. 2010 22:18, Nelson B Bolyard wrote: On 2010-10-21 13:31 PDT, Matej Kurpel wrote: This looks like Thunderbird cannot find the user certificate in its database. Well, it shouldn't anyway, since it resides on the token provided by a PKCS#11 module I am developing. Right. It's not nece

Re: Thunderbird: "Could not verify this certificate for unknown reasons"

2010-10-24 Thread Nelson B Bolyard
On 2010-10-24 02:12 PDT, Matej Kurpel wrote: [snip] > You can clearly see both my CA and user certificates. Certutil has used > my PKCS#11 module to obtain my user certificate. Then I launched the > second commany you were suggesting: > > certutil -d . -L -n "HTC Touch HD T8282:Matej Kurpel" >

Re: J-PAKE (was Re: Usage of FreeBL and FreeBL/mpi through JavaScript in Firefox 4 Sync)

2010-10-24 Thread Brian Smith
"Jean-Marc Desperrier" wrote: > The reference I gave before shows that there is now a widely accepted > opinion that SRP does not infringe on patent more than J-PAKE (even if > there was indeed that doubt a few years ago). > > A patent that covers SRP might be found, but it does not appear toda

Re: Usage of FreeBL and FreeBL/mpi through JavaScript in Firefox 4 Sync

2010-10-24 Thread Brian Smith
Nelson B Bolyard wrote: > [...] > I'm talking about putting JBAKE (or whatever it is) into the base product. > [...] Is there something specific about J-PAKE that you think is bad or worse than some alternative? Are you objecting to J-PAKE because you do not trust the proofs of security given