keys length by default

2005-11-02 Thread sniffdoz
Hi, I developed a Web page with he keygen attribute. When the page is displayed a key length by default is 2048 bytes and the box offers two choice 2048 and 1024. How to display by default the keys length at 1024 ? Thanks Sniffdoz ___

Re: phishing web sites using self-signed certs

2005-11-02 Thread Hendrik Weimer
Ka-Ping Yee [EMAIL PROTECTED] writes: Refusing to accept self-signed certificates is *not* the right thing to do. That would only further the notion that buying a certificate from one of dozens of approved CAs is what makes a website legitimate, which is false. Not necessairly. It will

Re: phishing web sites using self-signed certs

2005-11-02 Thread Ka-Ping Yee
On Tue, 1 Nov 2005, Julien Pierre wrote: Ka-Ping Yee wrote: What fraction of the 30 to 50 root CAs on your root CA list do you know or have ever heard of? Do you know their policies? Do you know their management? Why should you trust them? What makes a website legitimate is the fact

Re: phishing web sites using self-signed certs

2005-11-02 Thread Ka-Ping Yee
On Thu, 3 Nov 2005, Duane wrote: Ka-Ping Yee wrote: Using a petname field to label a website is really no different than assigning names to your IM buddies, which people already do. Why doesn't impersonation work on IM? [*] Because your buddy list keeps track of who you know. It can be

Re: phishing web sites using self-signed certs

2005-11-02 Thread Ka-Ping Yee
On Wed, 2 Nov 2005, Julien Pierre wrote: Ka-Ping Yee wrote: What other way does the average non-technical user have to know that the secure website is the one truly intended and not a fake, except than to rely upon a third party to do the verification for them ? Self-signed certs certainly

doing upcalls from NSS to Firefox

2005-11-02 Thread Peter Djalaliev
Hello, Does NSS have an option to do an upcall to the Mozilla application - e.g. Firefox? For example, if during the TLS handshake we want to query the user for something, what would be the ebst way to do this? I thought that I can define a function that fires up an event in Firefox and then