Re: Intent to unimplement: proprietary window.crypto functions/properties

2014-10-30 Thread pieterjan
Maybe because the removal wasn't proposed at that time? Now there is a proposal to remove something that has no working (not even standardized) successor. Also, people using this stuff are really far away from W3C. Firefox had a competitive advantage in supporting this. It would have been

Re: Intent to unimplement: proprietary window.crypto functions/properties

2014-06-30 Thread helpcrypto helpcrypto
On Fri, Jun 27, 2014 at 6:32 PM, Brian Smith br...@briansmith.org wrote: Hi The issue is that the WebCrypto API uses a totally separate keystore from the X.509 client certificate keystore (if it doesn't, it should be), and the stuff that Red Hat does is about client certificates. AFAICT,

Re: Intent to unimplement: proprietary window.crypto functions/properties

2014-06-30 Thread Matthias Hunstock
Am 27.06.2014 18:32, schrieb Brian Smith: However, I think that is a good idea anyway, because Firefox (and Thunderbird) should be using the native OS for client certificates and S/MIME certificates anyway. Additionally or exclusive? When I think of using smartcard-based client certificates

Re: Intent to unimplement: proprietary window.crypto functions/properties

2014-06-27 Thread Jürgen Brauckmann
David Keeler schrieb: Meanwhile, we are making progress on implementing the webcrypto specification[3]. When complete, webcrypto should provide compatible functionality for what these functions are currently being used to do. Any functionality not implementable using webcrypto is available to

Re: Intent to unimplement: proprietary window.crypto functions/properties

2014-06-27 Thread Nathan Kinder
On 06/27/2014 12:13 AM, Frederik Braun wrote: To be frank, I have only ever seen the non-standard crypto functions used in attacks, rather than in purposeful use. That doesn't mean that aren't being purposefully used. The current crypto functions are used pretty heavily by Dogtag Certificate

Re: Intent to unimplement: proprietary window.crypto functions/properties

2014-06-27 Thread David Keeler
On 06/27/2014 05:11 AM, Jürgen Brauckmann wrote: David Keeler schrieb: Meanwhile, we are making progress on implementing the webcrypto specification[3]. When complete, webcrypto should provide compatible functionality for what these functions are currently being used to do. Any functionality

Re: Intent to unimplement: proprietary window.crypto functions/properties

2014-06-27 Thread David Keeler
On 06/27/2014 07:37 AM, Nathan Kinder wrote: On 06/27/2014 12:13 AM, Frederik Braun wrote: To be frank, I have only ever seen the non-standard crypto functions used in attacks, rather than in purposeful use. That doesn't mean that aren't being purposefully used. The current crypto

Re: Intent to unimplement: proprietary window.crypto functions/properties

2014-06-27 Thread Brian Smith
On Fri, Jun 27, 2014 at 9:19 AM, David Keeler dkee...@mozilla.com wrote: On 06/27/2014 07:37 AM, Nathan Kinder wrote: On 06/27/2014 12:13 AM, Frederik Braun wrote: To be frank, I have only ever seen the non-standard crypto functions used in attacks, rather than in purposeful use. That

Intent to unimplement: proprietary window.crypto functions/properties

2014-06-26 Thread David Keeler
[dev.platform cc'd for visibility - please follow-up to dev.tech.crypto] Summary: We intend to remove the proprietary window.crypto functions and properties. See https://developer.mozilla.org/en-US/docs/JavaScript_crypto for what will be affected by this change. Our reasoning is as follows: These

Re: Intent to unimplement: proprietary window.crypto functions/properties

2014-06-26 Thread Ehsan Akhgari
Yes, please! With WebCrypto being implemented, there is very little reason for us to keep these functions around. I have heard that there are some enterprise applications that use these APIs and hopefully they will have enough time to migrate away from using them by the time that we ship