Re: Review of changes to the HTTP spec

2012-01-19 Thread Brian Smith
Thanks Wan-Teh. - Original Message - > From: "Wan-Teh Chang" > To: "mozilla's crypto code discussion list" > > Sent: Thursday, January 19, 2012 9:57:29 AM > Subject: Re: Review of changes to the HTTP spec > > On Thu, Jan 19, 2012 at 1:43 AM, Brian Smith > wrote: > > HTTPbis seems to b

Re: Review of changes to the HTTP spec

2012-01-19 Thread Wan-Teh Chang
On Thu, Jan 19, 2012 at 1:43 AM, Brian Smith wrote: > HTTPbis seems to be in its final stages. Although it is supposed to be a > somewhat minor revision, quite significant changes have been made to > the spec. We should review the changes and make sure we provide our > feedback before it is too la

Re: Removal of NSS and/or NSPR from the API exposed to addons

2012-01-19 Thread Mike Hommey
On Thu, Jan 19, 2012 at 11:15:51AM -0500, John Dennis wrote: > On 01/19/2012 07:26 AM, Mike Hommey wrote: > >He is talking about runtime detection. Not build time detection. And we > >already have --with-system-nss. My point is that it's probably not worth > >trying to do runtime detection because

Re: Removal of NSS and/or NSPR from the API exposed to addons

2012-01-19 Thread John Dennis
On 01/19/2012 07:26 AM, Mike Hommey wrote: He is talking about runtime detection. Not build time detection. And we already have --with-system-nss. My point is that it's probably not worth trying to do runtime detection because few systems will have the right system nss anyways. I've been lurkin

Re: Removal of NSS and/or NSPR from the API exposed to addons

2012-01-19 Thread Brian Smith
Eitan Adler wrote: > Brian Smith wrote: > > If the system NSS isn't new enough, then Firefox's local version of > > NSS would be used. > > From a packager point of view, please don't automagically detect > these things. If the system NSS is supported provide an option > --with-system-nss which if

Re: Removal of NSS and/or NSPR from the API exposed to addons

2012-01-19 Thread Mike Hommey
On Thu, Jan 19, 2012 at 06:52:26AM -0500, Eitan Adler wrote: > On Thu, Jan 19, 2012 at 3:55 AM, Brian Smith wrote: > > Mike Hommey wrote: > >> But linux users are not necessarily up-to-date with the latest NSS. I > >> seriously doubt the number of users with the very last system nss > >> exceeds 1

Re: Removal of NSS and/or NSPR from the API exposed to addons

2012-01-19 Thread Eitan Adler
On Thu, Jan 19, 2012 at 3:55 AM, Brian Smith wrote: > Mike Hommey wrote: >> But linux users are not necessarily up-to-date with the latest NSS. I >> seriously doubt the number of users with the very last system nss >> exceeds 10% of the linux user base except in exceptional "good >> timing" cases

Documentation of differences between our networking stack and other browsers' stacks and security bug triaging

2012-01-19 Thread Brian Smith
I think that we should start some documentation (e.g. a wiki) that documents the differences between our implementation and other browsers' implementations, along with a justification for the difference and/or a link to a bug about resolving the difference. Examples of differences, off the top

Review of changes to the HTTP spec

2012-01-19 Thread Brian Smith
HTTPbis seems to be in its final stages. Although it is supposed to be a somewhat minor revision, quite significant changes have been made to the spec. We should review the changes and make sure we provide our feedback before it is too late. In particular, if there is some change that we think w

Re: Removal of NSS and/or NSPR from the API exposed to addons

2012-01-19 Thread Brian Smith
Mike Hommey wrote: > But linux users are not necessarily up-to-date with the latest NSS. I > seriously doubt the number of users with the very last system nss > exceeds 10% of the linux user base except in exceptional "good > timing" cases (like when ubuntu is released with the latest version), > b

Re: Removal of NSS and/or NSPR from the API exposed to addons

2012-01-19 Thread Mike Hommey
On Wed, Jan 18, 2012 at 11:45:02PM -0800, Brian Smith wrote: > Mike Hommey wrote: > > > In the long run, for performance reasons, we should probably prefer > > > the system NSS libraries to our own, whenever the system NSS > > > libraries are available and are the right version, because at > > > le