Re: Improving SSL client auth and bad certificate reporting in non-browser applications

2010-04-10 Thread Gervase Markham
On 26/03/10 19:04, Kai Engert wrote: thanks a lot for your feedback. I've created a graphical presentation for the client authentication part: http://kuix.de/mozilla/sslauth/cli-v1-pres/ I still haven't had a chance to look at this :-(( I'm very sorry. (I do have a good excuse, though: http:/

Re: Improving SSL client auth and bad certificate reporting in non-browser applications

2010-04-01 Thread Kai Engert
On 26.03.2010 13:44, Gervase Markham wrote: The basic idea is to show an indicator in chrome whenever a site asks for client authentication, and give the user full control over using a personal certificate for authentication (or not using one). The interface should also support persistent confi

Re: Improving SSL client auth and bad certificate reporting in non-browser applications

2010-03-28 Thread Kai Engert
On 28.03.2010 06:19, Nelson B Bolyard wrote: The sequence of events in the dialog is likely, IMO, to give the users the impression that client authentication is a user-initiated act, rather than a server initiated act. It seems to say to the user, "if you want to authenticate to this server with

Re: Improving SSL client auth and bad certificate reporting in non-browser applications

2010-03-27 Thread Nelson B Bolyard
On 2010-03-26 12:04 PST, Kai Engert wrote: > On 26.03.2010 13:44, Gervase Markham wrote: >> I've been looking at your documents, but I do think this is a case where >> a picture is worth a thousand words. Do you have any plans to provide UI >> mockups? > > Hi Gerv, > > thanks a lot for your feedb

Re: Improving SSL client auth and bad certificate reporting in non-browser applications

2010-03-26 Thread Eddy Nigg
On 03/26/2010 10:04 PM, Kai Engert: On 26.03.2010 13:44, Gervase Markham wrote: I've been looking at your documents, but I do think this is a case where a picture is worth a thousand words. Do you have any plans to provide UI mockups? Hi Gerv, thanks a lot for your feedback. I've created a g

Re: Improving SSL client auth and bad certificate reporting in non-browser applications

2010-03-26 Thread Kai Engert
On 26.03.2010 13:44, Gervase Markham wrote: I've been looking at your documents, but I do think this is a case where a picture is worth a thousand words. Do you have any plans to provide UI mockups? Hi Gerv, thanks a lot for your feedback. I've created a graphical presentation for the client

Re: Improving SSL client auth and bad certificate reporting in non-browser applications

2010-03-26 Thread Gervase Markham
Hi Kai, I've been looking at your documents, but I do think this is a case where a picture is worth a thousand words. Do you have any plans to provide UI mockups? On 16/03/10 23:12, Kai Engert wrote: In short, we'd like to stop the current prompts and implement a better user interface. I t

Re: Improving SSL client auth and bad certificate reporting in non-browser applications

2010-03-17 Thread Kai Engert
On 17.03.2010 02:40, Wan-Teh Chang wrote: Is your proposal or Aza Raskin's proposal similar to the proposal that Henry Story of the "foaf" project has been advocating? No, under the assumption you're refering to http://esw.w3.org/Foaf%2Bssl Contrary to "foaf+ssl" I'm not proposing any new

Re: Improving SSL client auth and bad certificate reporting in non-browser applications

2010-03-16 Thread Wan-Teh Chang
Kai, Is your proposal or Aza Raskin's proposal similar to the proposal that Henry Story of the "foaf" project has been advocating? Wan-Teh -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto

Re: Improving SSL client auth and bad certificate reporting in non-browser applications

2010-03-16 Thread Eddy Nigg
On 03/17/2010 01:12 AM, Kai Engert: I'd like to announce two design documents. The primary intention is to improve the functionality of SSL client authentication in Mozilla software. In short, we'd like to stop the current prompts and implement a better user interface. Excellent effort! I

Improving SSL client auth and bad certificate reporting in non-browser applications

2010-03-16 Thread Kai Engert
I'd like to announce two design documents. The primary intention is to improve the functionality of SSL client authentication in Mozilla software. In short, we'd like to stop the current prompts and implement a better user interface. The basic idea is to show an indicator in chrome whenever a