Re: Why do we need JSS?

2009-08-11 Thread William L. Hartzell
JamesH wrote: I have some confusion with regard to JSS due to the lack of proper documentation. Looks like JDK 6 can talk to NSS natively with this configuration: http://java.sun.com/developer/technicalArticles/J2SE/security/#2 If that's the case, why do I need JSS? Your comments are

Re: Do big parts of security in mozilla suck?

2009-07-23 Thread William L. Hartzell
Eddy Nigg wrote: On 07/23/2009 03:59 PM, Anders Rundgren: There is no Mozilla-list for discussing high-level aspects of PKI-using applications like TB and FF. This list is mainly for technical related matters of cryptography in relation to Mozilla software, the dev.security.policy is

Re: Moving browser PKI forward (Re: W3C Terminates XHTML2)

2009-07-05 Thread William L. Hartzell
Anders Rundgren wrote: Snip There is also no natural home for these issues since Mozilla, Apple, Google and Microsoft haven't heard about such requirements which is due to the fact that two-factor-authentication on the US consumer market is close to zero. In fact, in the Information Card forum

Re: Moving browser PKI forward (Re: W3C Terminates XHTML2)

2009-07-04 Thread William L. Hartzell
Sir: Anders Rundgren wrote: Nelson B Bolyard Wrote. This demonstrates that standardization is an option but an increasingly difficult option as well in an ever faster-moving world: http://www.w3.org/2009/06/xhtml-faq.html Does it? It appears to me that this is the standards body pruning