Hey Gregory,

We might have something you can use. Have a look at jwcrypto.jsm inside the 
Identity module[1].

That's a copy of code hosted on github[2], although I don't think it is fully 
up-to-date with the finalized JOSE specs. The copy in m-c is no doubt farther 
out-of-date; I'm not sure when it was last updated.

Sean (cc'd) has done a bit of work getting jwcrypto updated recently, and might 
have more to add.

Cheers,

Jared

[1] http://dxr.mozilla.org/mozilla-central/source/toolkit/identity/jwcrypto.jsm
[2] https://github.com/mozilla/jwcrypto/

On Aug 12, 2014, at 10:26 AM, Ian Bicking <[email protected]> wrote:

> Someone working on FxA might have an answer to this query...
> 
> 
> ---------- Forwarded message ----------
> From: Gregory Szorc <[email protected]>
> Date: Tue, Aug 12, 2014 at 12:22 PM
> Subject: Evaluating adding JOSE and JWS to mozilla-central
> To: dev-platform <[email protected]>
> 
> 
> The possibility of using JavaScript Object Signing and Encryption (JOSE) - 
> specifically the verification part of the JSON Web Signature (JWS) component 
> - came up as part of planning a JavaScript-based feature I'm working on.
> 
> We don't appear to have an implementation in mozilla-central yet. I'm trying 
> to weigh whether to spend extra effort to add JWS support to the tree or to 
> try to shoehorn existing signing solutions to fit my need.
> 
> First, does anyone know of an existing browser-side implementation of JWS 
> used by Mozilla? I know we have Python in Marketplace doing signing. We /may/ 
> have parts of Firefox OS doing client-side signing verification. My 
> requirement is for chrome-privileged JS to do X509 signing verification. I'll 
> settle for an XPIDL interface to NSS.
> 
> Second, would having JWS support in m-c be beneficial to anyone else?
> 
> If this isn't easy to add, I'll probably be lazy and leverage an existing 
> solution. Convince me it is worth doing.
> 
> Gregory
> _______________________________________________
> Dev-fxacct mailing list
> [email protected]
> https://mail.mozilla.org/listinfo/dev-fxacct

_______________________________________________
Dev-fxacct mailing list
[email protected]
https://mail.mozilla.org/listinfo/dev-fxacct

Reply via email to