Re: Who is using NSS in their projects?

2010-03-08 Thread davidwboswell
 There are lots of applications that use NSS but use no other aspect of
 mozilla technologies.  Perhaps you should have a separate list of these.

I'd recommend setting up a page somewhere, perhaps on MDC, where
people can easily add to a list of known NSS users.  For example, I
monitor the XULRunner Hall of Fame page and use that as input for the
Featured Mozilla-based Applications page.

https://developer.mozilla.org/en/XULRunner_Hall_of_Fame

I'm happy to promote the more interesting uses of Mozilla technology,
but people much more familiar with the various bits of code in the
repository need to keep track of who is doing what.

David
___
dev-security mailing list
dev-security@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-security


Re: Who is using NSS in their projects?

2010-03-06 Thread Nelson Bolyard
On 2010-03-03 10:58 PST, Shailendra Jain wrote:
 Is this source of information about Linux  planning to integrate NSS as
 main security features available some where in the web or in Linux doc?

RedHat is doing this for RedHat Linux.  I'm sure you will find info on
RedHat's web site.  I don't know how much (if any) this will affect other
distro's.  NSS is part of the LSB (Linux Software Base or Linux System
Base), which means that you can count on it being in all Linux distros,
but the important question (to me) is whether the system programs themselves
will rely on it for their crypto security.  I believe the
answer will be yes for RH Linux.  I'm not as optimistic for the other
distros.
___
dev-security mailing list
dev-security@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-security


Re: Who is using NSS in their projects?

2010-03-06 Thread Nelson Bolyard
On 2010-03-02 10:06 PST, davidwboswell davidwbosw...@yahoo.com wrote:
 I maintain a list of applications that use Mozilla technologies in
 their projects and wanted to add more examples of projects that use
 NSS.
 
 http://www.mozilla.org/projects/mozilla-based.html

There are lots of applications that use NSS but use no other aspect of
mozilla technologies.  Perhaps you should have a separate list of these.

For example, of the network server software products offered by Sun
Microsystems that are not written in Java, most use NSS.
AOL Instant Messenger used NSS for years, and recent versions still
include the NSS libraries, but don't seem to actually use them.

 I had seen references to Apache using NSS in mod_nss so I included it
 as a featured application and then blogged about it.  In the comments
 on that post though, there were questions if Apache was really using
 NSS or not.  

Apache has a plug-in architecture.  There are many plug-ins for it.
Some are co-developed by the Apache developers themselves and are
distributed along with Apache.  Others are developed independently and
distributed independently (or distributed together with Apache in downstream
distros).  mod_nss is one of the latter.  There are many others.

 I'd also like to promote other NSS users, so if there's a list
 somewhere like the XULRunner Hall of Fame or if anyone wants to just
 post here with some examples, that would be great.

I'm cross posting this in mozilla.dev.tech.crypto, which is where most
developers who use NSS hang out.  Maybe some of them will volunteer info
about their products that use NSS.
___
dev-security mailing list
dev-security@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-security


Re: Who is using NSS in their projects?

2010-03-03 Thread Jean-Marc Desperrier

davidwboswell wrote:

I maintain a list of applications that use Mozilla technologies in
their projects and wanted to add more examples of projects that use
NSS.


You obviously forgot to include Google Chrome in the list !! ;-)

___
dev-security mailing list
dev-security@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-security


Re: Who is using NSS in their projects?

2010-03-03 Thread Gen Kanai


On 3/3/10 10:31 AM, Jean-Marc Desperrier wrote:
 davidwboswell wrote:
   
 I maintain a list of applications that use Mozilla technologies in
 their projects and wanted to add more examples of projects that use
 NSS.
 
 You obviously forgot to include Google Chrome in the list !! ;-)
The full list is here: (and Chrome is listed as using NSS, NPAPI, NSPR)

https://developer.mozilla.org/En/List_of_Mozilla-Based_Applications

Gen
___
dev-security mailing list
dev-security@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-security


Re: Who is using NSS in their projects?

2010-03-03 Thread davidwboswell
 You obviously forgot to include Google Chrome in the list !! ;-)

Google Chrome isn't on the featured list, but I also maintain a longer
list of all known users of Mozilla technologies that does include
Chrome:

https://developer.mozilla.org/en/List_of_Mozilla-Based_Applications

I felt that it would be very confusing to feature Chrome since most
people would probably assume it was a reference to the rendering
engine.  Chrome seems like an exception though and I'm happy to
feature other NSS users on the mozilla.org page.

David
___
dev-security mailing list
dev-security@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-security


Re: Who is using NSS in their projects?

2010-03-03 Thread Justin P. mattock

On 03/03/2010 10:45 AM, Gen Kanai wrote:



On 3/3/10 10:31 AM, Jean-Marc Desperrier wrote:

davidwboswell wrote:


I maintain a list of applications that use Mozilla technologies in
their projects and wanted to add more examples of projects that use
NSS.


You obviously forgot to include Google Chrome in the list !! ;-)

The full list is here: (and Chrome is listed as using NSS, NPAPI, NSPR)

https://developer.mozilla.org/En/List_of_Mozilla-Based_Applications

Gen
___
dev-security mailing list
dev-security@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-security



there's also glibc that uses this stuff

Justin P. Mattock
___
dev-security mailing list
dev-security@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-security


Re: Who is using NSS in their projects?

2010-03-03 Thread Christopher Blizzard

On 3/3/2010 10:40 AM, Shailendra Jain wrote:

I also heard that Linux is planning to integrate NSS as main security
features for Linux. Is that true?

   


That's true, but I'm not sure how deep it goes.

--Chris
___
dev-security mailing list
dev-security@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-security


Re: Who is using NSS in their projects?

2010-03-03 Thread Shailendra Jain
Is this source of information about Linux  planning to integrate NSS as main
security
features available some where in the web or in Linux doc?

On Thu, Mar 4, 2010 at 12:24 AM, Christopher Blizzard
blizz...@mozilla.comwrote:

 On 3/3/2010 10:40 AM, Shailendra Jain wrote:

 I also heard that Linux is planning to integrate NSS as main security
 features for Linux. Is that true?




 That's true, but I'm not sure how deep it goes.

 --Chris

___
dev-security mailing list
dev-security@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-security


Who is using NSS in their projects?

2010-03-02 Thread davidwboswell
I maintain a list of applications that use Mozilla technologies in
their projects and wanted to add more examples of projects that use
NSS.

http://www.mozilla.org/projects/mozilla-based.html

I had seen references to Apache using NSS in mod_nss so I included it
as a featured application and then blogged about it.  In the comments
on that post though, there were questions if Apache was really using
NSS or not.  If I'm completely mistaken here, let me know and I'll
take it down.  If it is using NSS in some way, let me know if there is
any place to point people who have questions about it.

http://davidwboswell.wordpress.com/2010/03/01/featured-mozilla-based-applications-for-march/

I'd also like to promote other NSS users, so if there's a list
somewhere like the XULRunner Hall of Fame or if anyone wants to just
post here with some examples, that would be great.

Thanks,
David
___
dev-security mailing list
dev-security@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-security