Julien Pierre wrote:
I believe (but am not sure) that PEM format may contain the object in
plaintext, and thus is not a suitable secure transport format for a
private key, unlike PKCS#12, which allows the key within the file to be
encrypted, when you set a passphrase, and thus PEM is considered too
insecure a format to support for NSS and Mozilla, at least as far as
private keys are concerned.
I can protect PEM format objects with passphrases using OpenSSL.
--
Heikki Toivonen
_______________________________________________
mozilla-crypto mailing list
[EMAIL PROTECTED]
http://mail.mozilla.org/listinfo/mozilla-crypto