NSPR 4.9 and NSS 3.13.2

We have released NSPR 4.9, cvs tag NSPR_4_9_RTM We have released NSS 3.13.2, cvs tag NSS_3_13_2_RTM Source code is available from ftp://ftp.mozilla.org/pub/mozilla.org/nspr/releases/v4.9/src/ ftp://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_13_2_RTM/src/ Kai -- dev-tech-crypto

Firefox 10 and NSPR

Due to an oversight, the official Firefox 10 release was shipped with a beta snapshot of the NSPR base library. We believe this is a minor issue, the difference between the beta snapshot and the final version 4.9 are small. You may inspect the differences at

Re: ETA on smaller stick penalty for CA Violations? (paging bsmith)

Am 2012-02-19 02:46, schrieb Stephen Schultze: Brian, any thoughts on this? Is this something we should be holding out for, or should we look to other approaches? A different interesting approach for a punishment could be removal of the ability to create Sub-CAs. This would not put a CA out

Re: ETA on smaller stick penalty for CA Violations? (paging bsmith)

Am 2012-02-19 06:00, schrieb Stephen Schultze: Yes, but it would also break all existing certs issued by that CA that are in the wild, which is one of the reasons that Mozilla has been so resistant to removing roots in the first place. Why? The point was only breaking the certs signed by