Julien Pierre wrote:
I believe (but am not sure) that PEM format may contain the object in plaintext, and thus is not a suitable secure transport format for a private key, unlike PKCS#12, which allows the key within the file to be encrypted, when you set a passphrase, and thus PEM is considered too insecure a format to support for NSS and Mozilla, at least as far as private keys are concerned.

I can protect PEM format objects with passphrases using OpenSSL.

--
  Heikki Toivonen
_______________________________________________
mozilla-crypto mailing list
[EMAIL PROTECTED]
http://mail.mozilla.org/listinfo/mozilla-crypto

Reply via email to