Re: Firefox Sync, Key Exchange/Entry, and FIPS (was Re: NSS linkage and FIPS-140 compliance for Firefox)

2010-10-21 Thread Robert Relyea
On 10/20/2010 06:29 PM, Brian Smith wrote: Brian Smith wrote: (Because of Firefox Sync, we are now always going to have crypto features that won't work in FIPS mode.) Sigh, ignoring FIPS mode in a feature, is usually a red flag. It means you are handling CSP's where you really

Firefox Sync, Key Exchange/Entry, and FIPS (was Re: NSS linkage and FIPS-140 compliance for Firefox)

2010-10-20 Thread Brian Smith
Brian Smith wrote: (Because of Firefox Sync, we are now always going to have crypto features that won't work in FIPS mode.) Sigh, ignoring FIPS mode in a feature, is usually a red flag. It means you are handling CSP's where you really shouldn't be. Firefox Sync *CAN* be implemented in FIPS