> That's an interesting idea. It might also be possible to configure Gecko > (Necko, really) to be as restrictive as the Android stack we use.
There is a stumbling block here that's worth mentioning: the SSL stacks and certificate stores are separate. An external tool, or Gecko, will necessarily leave a gap in the validation, and closing that gap would be work. _______________________________________________ Dev-fxacct mailing list [email protected] https://mail.mozilla.org/listinfo/dev-fxacct

