Re: Mozilla NSS and DANE

2011-10-28 Thread Pontus Ericson 
Even so, I would have to retrieve different resource records than the ones
used if DNS was used to resolve the email address. So I adding some sort of
DNS information retrieval was something I had already counted on.

Ofcourse if no form of DNS-resolver functionality exists in the library it
will make it harder but I still think it's possible to use DANE.

-Pontus Ericson

2011/10/14 Wan-Teh Chang w...@google.com

 On Thu, Oct 13, 2011 at 3:54 AM, Pontus Ericson kpc.eric...@gmail.com
 wrote:
  Hi
 
  I mailed this mailinglist a few weeks ago regarding the development of
  DNS-based certification authentication for S/MIME.
 
  I am now starting the project fully and I'm going to use
 Thunderbird/Mozilla
  NSS in the development. I was not part of the mailinglist at the time of
 my
  first mail so if any answer to that mail got directed to the list I did
  sadly not recieve it.

 Hi Pontus,

 Here is the reply I sent last time:

  Are you sure DANE can be used to verify email certificates?  We don't
  use DNS to resolve email addresses.

 Wan-Teh
 --
 dev-tech-crypto mailing list
 dev-tech-crypto@lists.mozilla.org
 https://lists.mozilla.org/listinfo/dev-tech-crypto

-- 
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

IETF meeting and DANE question

2011-10-28 Thread Pontus Ericson 
Hi,

First of I would like to check again if anyone had any input on my project
with DANE(DNS-based Authentication for Named Entities) for S/MIME. Mainly if
anyone has any knowledge on where in the NSS I should focus my work and if
there is any pre-existing DNS-resolver functions and where the S/MIME cert
is retrieved  validated.
(See http://tools.ietf.org/html/draft-ietf-dane-use-cases-05 ,
http://tools.ietf.org/html/draft-hoffman-dane-smime-01 for reference)

Secondly I am wondering if anyone is going to the IETF meeting in November
that might also be interested in this project?

-Pontus Ericson
-- 
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

NSS 3.13.1 released

2011-10-28 Thread Kai Engert 

The NSS team released version 3.13.1, a general patch release.

ftp://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_13_1_RTM/src/

SHA1SUM:
d8e7ee9f9f1e0bfa2ea8b72d25727634fea130a6  nss-3.13.1.tar.gz

Kai
--
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto