Victor Probo wrote: > Folks; > I read the following in a CPS. I question if the PSM actually can do > this. If it does, do all versions do it? Always?, How triggered? > > "Once the RA is accessed, the subscriber's Personal Security Module > (PSM) within the Netscape browser is prompted to create the > private/public key pair. In addition, *the private key is encrypted and > included* within the Certificate Request Message Format (CRMF) and sent > to the CA." > > Bolding added to the questionalble action. > > I know it says Netscape, but if Mozilla can't do this, the designer may > be stuck with an architecture without an upgrade path.
PSM is in both Netscape and Mozilla (at one point they shared the same implementation). So all versions of Mozilla can do this, but only Communicator with PSM has this capacity. It's part of the CRMF implementation. BTW, I should point out that This function only happens when the CA requests it can keygen time, and only on encryption keys. Victor's conjecture later in this thread is correct. This does not happen when the keygen tag is used. bob > > > Vicror Probo >
