Re: Adding certificates to the nss database

2007-07-09 Thread Robert Relyea
Nelson B wrote: [EMAIL PROTECTED] wrote: I'm having a tricky problem. What I am trying to do is to add an object signing certificate to the NSS database. This can be done using certutil, yes. But this is a xulapp that uses nsINSSCertCache, which I fear is causing problems. You

Getting public/private keys into/out of NSS

2007-07-09 Thread Dave Townsend
I've spent much of the afternoon delving through the NSS APIs trying to figure out how to achieve my goals. I'm basicaly working on signing and verifying data with public and private keys. I've figured that SGN_SignData and VFY_VerifyData are my friends (or should I be using the

Re: Link-fingerprints: weak unless link received securely

2007-07-09 Thread Gervase Markham
Michael Vincent van Rantwijk, MultiZilla wrote: Note that we asked (per e-mail) the top 500 download sites, and most of them prefer to wait and see what Link Fingerprinting is and can do for them, because so far nobody really believes that it will do any good for them, but that it will add

Re: Link-fingerprints: weak unless link received securely

2007-07-09 Thread Michael Vincent van Rantwijk, MultiZilla
Nils Maier wrote: Michael Vincent van Rantwijk, MultiZilla schrieb: Note that we asked (per e-mail) the top 500 download sites, and most of them prefer to wait and see what Link Fingerprinting is and can do for them, because so far nobody really believes that it will do any good for them, but

Re: Getting public/private keys into/out of NSS

2007-07-09 Thread Nelson Bolyard
Dave Townsend wrote: I've spent much of the afternoon delving through the NSS APIs trying to figure out how to achieve my goals. I'm basicaly working on signing and verifying data with public and private keys. I've figured that SGN_SignData and VFY_VerifyData are my friends (or should I be

Re: Link-fingerprints: weak unless link received securely

2007-07-09 Thread David E. Ross
On 7/9/2007 1:07 PM, Gervase Markham wrote: Michael Vincent van Rantwijk, MultiZilla wrote: Hm, and where is this 15% coming from? Just another assumption? It's a conservative estimate of the market share of Firefox. Gerv That implies the assumption that ALL Firefox users would then be

Re: Getting public/private keys into/out of NSS

2007-07-09 Thread Dave Townsend
Robert Relyea wrote: Dave Townsend wrote: Anyway basic issue is that I need a SECKEYPublicKey and SECKEYPrivateKey. I can see how to create them in NSS for use, I've also found a technical note which suggests how to bring a public key into NSS, however I don't see anything about

Re: Getting public/private keys into/out of NSS

2007-07-09 Thread Robert Relyea
Dave Townsend wrote: Nelson Bolyard wrote: Dave Townsend wrote: I've spent much of the afternoon delving through the NSS APIs trying to figure out how to achieve my goals. I'm basicaly working on signing and verifying data with public and private keys. I've figured that SGN_SignData