On Wed, Aug 13, 2008 at 8:01 AM, Howard Chu <[EMAIL PROTECTED]> wrote: > Michael Ströder wrote: >> Well, the situation of stuffing everything in a directory/file with >> PEM-formatted certs is not better. And every software can have its own >> cert?.db. > > At least filesystems are known to safely support multiple concurrent > access... ;)
This is only true for multiple concurrent read accesses. Multiple concurrent read accesses are also safe for the NSS cert and key databases. The problem only occurs when there is a concurrent write access. Most NSS-based server applications open the NSS databases in read-only mode, so they can run with multiple processes safely. But client applications such as Firefox and Thunderbird open the NSS databases in read-write mode. Wan-Teh _______________________________________________ dev-tech-crypto mailing list [email protected] https://lists.mozilla.org/listinfo/dev-tech-crypto

