Victor Probo wrote: > I understand the implications of the browser > storing/obscurring/encryptiong data to make the user's life easier. > What I am asking for are pointers to the API (Application Programming > Interface) so I know what those headers are, or how to get the PSM to > pass private keys for escrow. > *Where are the specs/docs?*
Disclaimer: I am not a security expert or a PSM expert, so I can only guess about details. The "disable PSM" being referred to in this thread is, I believe, simply a case of switching off the auto form-completions stuff for reasons we're both aware of. I am not aware of any methods to do that, but I suspect that Moz will do so based on HTTP headers. HTTP headers will be detailed in the HTTP specs (RFC 1945, I think). mozilla is PROBABLY only using standard ones. In any case, you're best heading over to n.p.m.security. http://www.mozilla.org/docs/#security might have useful docs -- gav
