SHA-256 support

2013-11-18 Thread Gervase Markham
Hi everyone, Following Microsoft's announcement re: SHA-1, some CAs are asking browser and OS vendors about the ubiquity of SHA-256 support. It would be a help to them if we could say: - Which version of NSS first supported SHA-256 - Which versions of Mozilla/Firefox/SeaMonkey/Thunderbird that

Re: How do you sign a FireFox .xpi add-on file using Jarsigner?

2013-11-18 Thread Štefan Baebler
On Wednesday, November 13, 2013 11:19:45 PM UTC+1, Mike Price wrote: Does anyone know the secret to using Java's jarsigner.exe to sign a FireFox .xpi add on? I have seen a few references that seem to imply that this can be done successfully, but I can't get it to create an installable version

Re: Can NSS Signtool.exe access signing certificate keys from an HSM?

2013-11-18 Thread Štefan Baebler
On Tuesday, November 12, 2013 6:46:33 PM UTC+1, Mike Price wrote: We are trying to implement signing of xpi files using the NSS Signtool.exe. However, we need to access our certificate keys from our HSM server instead of having the keys installed in the local keystore on the signing machine.

Re: Proposal to Change the Default TLS Ciphersuites Offered by Browsers

2013-11-18 Thread Brian Smith
On Sun, Nov 10, 2013 at 4:39 AM, Kurt Roeckx k...@roeckx.be wrote: On Sat, Nov 09, 2013 at 02:57:48PM -0800, Brian Smith wrote: Last week, I also learned that ENISA, a European standards group, recommends Camellia alongside AES as a future-proof symmetric cipher algorithm; see [4]. They

Re: SHA-256 support

2013-11-18 Thread Julien Pierre
SHA-256 was added in NSS 3.8 , according to : http://www-archive.mozilla.org/projects/security/pki/nss/ On 11/18/2013 07:00, Gervase Markham wrote: Hi everyone, Following Microsoft's announcement re: SHA-1, some CAs are asking browser and OS vendors about the ubiquity of SHA-256 support. It

Re: SHA-256 support

2013-11-18 Thread Robert Relyea
On 11/18/2013 07:00 AM, Gervase Markham wrote: Hi everyone, Following Microsoft's announcement re: SHA-1, some CAs are asking browser and OS vendors about the ubiquity of SHA-256 support. It would be a help to them if we could say: - Which version of NSS first supported SHA-256 I quick look