Re: SHA-256 support

2013-11-18 Thread Robert Relyea
On 11/18/2013 07:00 AM, Gervase Markham wrote: > Hi everyone, > > Following Microsoft's announcement re: SHA-1, some CAs are asking > browser and OS vendors about the ubiquity of SHA-256 support. It would > be a help to them if we could say: > > - Which version of NSS first supported SHA-256 I quic

Re: SHA-256 support

2013-11-18 Thread Julien Pierre
SHA-256 was added in NSS 3.8 , according to : http://www-archive.mozilla.org/projects/security/pki/nss/ On 11/18/2013 07:00, Gervase Markham wrote: Hi everyone, Following Microsoft's announcement re: SHA-1, some CAs are asking browser and OS vendors about the ubiquity of SHA-256 support. It wo

Re: Proposal to Change the Default TLS Ciphersuites Offered by Browsers

2013-11-18 Thread Brian Smith
On Sun, Nov 10, 2013 at 4:39 AM, Kurt Roeckx wrote: > On Sat, Nov 09, 2013 at 02:57:48PM -0800, Brian Smith wrote: >> Last week, I also learned that ENISA, a European standards group, >> recommends Camellia alongside AES as a future-proof symmetric cipher >> algorithm; see [4]. > > They recommend:

Re: Can NSS Signtool.exe access signing certificate keys from an HSM?

2013-11-18 Thread Štefan Baebler
On Tuesday, November 12, 2013 6:46:33 PM UTC+1, Mike Price wrote: > We are trying to implement signing of xpi files using the NSS Signtool.exe. > However, we need to access our certificate keys from our HSM server instead > of having the keys installed in the local keystore on the signing machine

Re: How do you sign a FireFox .xpi add-on file using Jarsigner?

2013-11-18 Thread Štefan Baebler
On Wednesday, November 13, 2013 11:19:45 PM UTC+1, Mike Price wrote: > Does anyone know the secret to using Java's jarsigner.exe to sign a FireFox > .xpi add on? I have seen a few references that seem to imply that this can be > done successfully, but I can't get it to create an installable versi

SHA-256 support

2013-11-18 Thread Gervase Markham
Hi everyone, Following Microsoft's announcement re: SHA-1, some CAs are asking browser and OS vendors about the ubiquity of SHA-256 support. It would be a help to them if we could say: - Which version of NSS first supported SHA-256 - Which versions of Mozilla/Firefox/SeaMonkey/Thunderbird that tr