Proposal: implement a MITM report addon

2011-06-17 Thread Kai Engert
I would like to propose that someone could implement an addon for Mozilla applications with the following functionality: - it comes with a list of several hundred known major services, including https and email servers. - if the user gets a certificate error on one of the major sites, we

Re: DOMCrypt API developments

2011-06-17 Thread Jean-Marc Desperrier
David Dahl wrote: I find this API effort very interesting, however I'm left with the feeling you wish to leave out the use of PKI elements. A really neutral API would work both with and without PKI. Public Key crypto is actually the main use case of this API. I meant more certificate/X509

Re: DOMCrypt API developments

2011-06-17 Thread David Dahl
- Original Message - From: Jean-Marc Desperrier jmd...@gmail.com To: mozilla-dev-tech-cry...@lists.mozilla.org Sent: Friday, June 17, 2011 8:31:03 AM Subject: Re: DOMCrypt API developments David Dahl wrote: I find this API effort very interesting, however I'm left with the

Re: DOMCrypt API developments

2011-06-17 Thread Anders Rundgren
On 2011-06-17 15:31, Jean-Marc Desperrier wrote: David Dahl wrote: I find this API effort very interesting, however I'm left with the feeling you wish to leave out the use of PKI elements. A really neutral API would work both with and without PKI. Public Key crypto is actually the main use

Re: Announcing an experimental public S/MIME keyserver

2011-06-17 Thread Kai Engert
On 16.06.2011 13:52, Gervase Markham wrote: On 11/06/11 12:03, Michael Ströder wrote: This means if the user accidently sent in contact information in an e-mail footer this information is also disclosed. If not already there you should put a strong hint on the web page that the signed S/MIME