Re: To NSS-Java or not to NSS-Java, thats the question.

2012-04-10 Thread Gen Kanai
If you'd like to help make Firefox better for enterprises, we'd be delighted to have you submit patches instead of questioning our commitment to our users. -- Gen Kanai -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto

Re: [ANNOUNCE] NSS 3.13 Release

2011-10-17 Thread Gen Kanai
res NSPR 4.9.) Hi Wan-Teh, Thank you for this notice. I'm more just curious but do we know of any publicly software shipping for iOS that uses NSS 3.13? Thank you, Gen -- Gen Kanai -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto

Re: Thank you, Mozilla.

2011-01-09 Thread Gen Kanai
is becomes a larger issue we can move it to Mozilla.governance here: https://lists.mozilla.org/listinfo/governance But I would suggest a discussion in the former of the two lists first. -- Gen Kanai -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto

Re: SHA256 certificate support in Firefox.

2010-03-19 Thread Gen Kanai
rithm in next year. but current firefox version does not seem >> to support SHA256 certificate. >> > I believe that it does. Why do you think that it does not? > Could we be bumping up against that content handler bug for pkcs client certs? https://bugzilla

Re: SHA256 certificate support in Firefox.

2010-03-18 Thread Gen Kanai
=== > PayGate Inc. > * WEB STANDARD PAYMENT > * PCI DSS 100% COMPLIANT > * www.paygate.net > * payg...@paygate.net > > -- Gen Kanai -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto

Re: Problems importing PKCS #12 client certs

2010-03-03 Thread Gen Kanai
d? I have been told that Firefox is the only one of the 5 major desktop browsers that functions in the way that it does (i.e. the other browsers all have handlers for application/x-pkcs12.) -- Gen Kanai -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto

Problems importing PKCS #12 client certs

2010-02-14 Thread Gen Kanai
experience with PKCS#12 certs take a look at this bug and provide feedback? I'm a bit surprised that Firefox doesn't support PKCS#12. Thank you, Gen -- Gen Kanai http://blog.mozilla.com/gen/ -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/li

Re: MDC : NSS_cryptographic_module : No doc on NSC_ModuleDBFunc

2010-02-08 Thread Gen Kanai
two NSC_ functions. > > Similarly, I can't find the pages for several CK_ data types such as > CK_C_INITIALIZE_ARGS, which I seem to recall we documented. > > Wan-Teh If we're definitely missing pages from MDC, we need to document that and make sure that's not happening elsewhere. Let

Re: Pending roots and EV enablements

2009-05-20 Thread Gen Kanai
On May 19, 2009, at 10:23 AM, Nelson B Bolyard wrote: Now, I don't want to set unrealistic expectations, so I must inform you that I have NO idea whether Mozilla Corporation will accept any additional NSS changes at this point or not. Three weeks ago, Bob Relyea and I wrote to MoCo power

Re: SECOM Trust EV root inclusion request

2009-02-02 Thread Gen Kanai
Frank filed the inclusion request for SecomTrust on Dec. 8th, 2008. As we're almost 2 months past the discussion period for this request, I'd like to reconfirm that there are no other open issues. If there are any open issues, SecomTrust is eager to resolve them asap in order to have the ce

Re: OS dependence of mail cert profiles

2009-01-21 Thread Gen Kanai
On Jan 21, 2009, at 6:57 PM, Michael Bell wrote: SP3. If I use the same smartcard with Linux and Thunderbird 2.0.0.19 (more exactly icedove from Debian unstable) then I can configure all the necessary stuff (e.g. assign the cert to the mail account) but I cannot use the cert to sign or encrypt

Re: Unbelievable!

2008-12-25 Thread Gen Kanai
On Dec 26, 2008, at 1:49 AM, Frank Hecker wrote: Beyond that? It's somewhat of an open question. Frank Mozilla needs to have a concrete policy and procedures in place so that there is no question as to what the penalties would be for future actions of this kind. I personally like John

Re: Unbelievable!

2008-12-23 Thread Gen Kanai
More discussion on this topic over at Programming Reddit: http://www.reddit.com/r/programming/comments/7lb96/ssl_certificate_for_mozillacom_issued_without/ ___ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/l

Re: Unbelievable!

2008-12-23 Thread Gen Kanai
Are we going to receive information from Comodo regarding how many other Comodo resellers may be in a similar position to Certstar? Are we going to receive information from Certstar as to how many other certs may have been issued in error? How do we verify the claims from Comodo or Certstar

Re: [Fwd: Reminder - SSL Certificate for *.startcom.org expires in 10 Days]

2008-12-21 Thread Gen Kanai
On Dec 22, 2008, at 9:49 AM, Eddy Nigg wrote: On 12/22/2008 02:09 AM, Eddy Nigg: Has anybody an idea how to prevent those spam and scam attempts? I already contacted Godaddy with an abuse complaint. What else? Apparently this site is connected to Comodo. I went all the way and paid for a

Re: Ping - ping...

2008-11-11 Thread Gen Kanai
On Nov 3, 2008, at 11:52 PM, Eddy Nigg wrote: On 10/29/2008 11:13 PM, Eddy Nigg: Frank, what happened to the schedule and inclusions of CAs? Is there any problem preventing us from continuing to process the CAs which are ready for the comments period? BTW, I'd like to propose to cut the

Re: Bug 455162 - Provide a FIPS 140-2 compatibility mode

2008-08-24 Thread Gen Kanai
ities for supporting goals more important than "US government agency penetration" to drop what they are doing in order to do that? I'll leave that to your own conclusion. I've already made up my mind on this issue. Gen Kanai _

Re: GlobalSign requests (replacement root, EV)

2008-07-14 Thread Gen Kanai
On Jul 15, 2008, at 4:13 AM, Nelson B Bolyard wrote: > > Eddy Nigg wrote, On 2008-07-13 22:09: >> Nelson B Bolyard: >>> Eddy Nigg wrote, On 2008-07-13 13:53: >>> This is perhaps the first EV request which doesn't have an operating OCSP responder at this stage. The EV guidelines r

Re: NSS 3.12 is released

2008-06-23 Thread Gen Kanai
a note to the NSS 3.12 Release Notes > to clarify this point: > http://www.mozilla.org/projects/security/pki/nss/nss-3.12/nss-3.12- > release-notes.html#Introduction Wan-Teh, Do you think we'll get SQLite support in for 3.1 or perhaps a dot- release? Gen Kanai

Re: CA pending and included lists updated

2008-05-22 Thread Gen Kanai
On May 23, 2008, at 1:49 PM, Frank Hecker wrote: > I've updated the root CA certificate "pending" and "included" lists to > reflect all the new roots that got approved in time for Firefox 3 RC1: > >http://www.mozilla.org/projects/security/certs/pending/ >http://www.mozilla.org/projects/se

Re: Including FNMT cert in Firefox 3 (Spanish government)

2008-05-22 Thread Gen Kanai
On May 23, 2008, at 7:45 AM, pascal wrote: > Nelson B Bolyard a écrit : > >> >>> and in the bug, they provided the information we were asking >> >> They did? That information was supplied in comment 8 by a third >> party, namely you. Are you an official representative of FNMT? >> If not, then I

Re: Including FNMT cert in Firefox 3 (Spanish government)

2008-05-22 Thread Gen Kanai
On May 22, 2008, at 4:46 PM, Nukeador wrote: > You have to understand that it's a public CA, not a private > enterprise, FNMT is part of the Treasury and Economy Department of > Spain. FNMT is not the only public CA in the list. See below: "Kamu Sertifikasyon Merkezi is the one government CA in

Re: Including FNMT cert in Firefox 3 (Spanish government)

2008-05-21 Thread Gen Kanai
On May 22, 2008, at 5:36 AM, Kyle Hamilton wrote: > Cristina needs to OPEN an NEW BUG, with all her contact information. > The management of the request can only be done via direct contact > between the CA and the root team. > > There has been no valid request for inclusion. There is no "ball" in