NSS:Roadmap: Difference between revisions

no edit summary
No edit summary
Line 58: Line 58:


The NSS codebase currently contains [http://en.wikipedia.org/wiki/Elliptic_curve_cryptography Elliptic Curve Cryptography (ECC)] algorithms donated by Sun Labs, however they are turned off by default in the builds script. In this release we will implement the ECC TLS cipher suites ([https://bugzilla.mozilla.org/show_bug.cgi?id=236245 Bugzilla bug 236245]) and enable NSS to use third-party tokens that implement ECC. We have not yet decided if we will enable all ECC functionality in this release.
The NSS codebase currently contains [http://en.wikipedia.org/wiki/Elliptic_curve_cryptography Elliptic Curve Cryptography (ECC)] algorithms donated by Sun Labs, however they are turned off by default in the builds script. In this release we will implement the ECC TLS cipher suites ([https://bugzilla.mozilla.org/show_bug.cgi?id=236245 Bugzilla bug 236245]) and enable NSS to use third-party tokens that implement ECC. We have not yet decided if we will enable all ECC functionality in this release.
This work was originally scheduled for NSS 3.12. We have decided to do it earlier in NSS 3.11.1.
=== TLS Server Name Indication ===
We are considering accelerating the implementation of the TLS Server Name Indication (SNI) extension (see RFC 3546) in light of a recent IEBlog [http://blogs.msdn.com/ie/archive/2005/10/22/483795.aspx Upcoming HTTPS Improvements in Internet Explorer 7 Beta 2].


This work was originally scheduled for NSS 3.12. We have decided to do it earlier in NSS 3.11.1.
This work was originally scheduled for NSS 3.12. We have decided to do it earlier in NSS 3.11.1.
Line 77: Line 83:


New variants of CERT_VerifyCert will be added that use libpkix for certificate path validation.
New variants of CERT_VerifyCert will be added that use libpkix for certificate path validation.
=== TLS Server Name Indication ===
We are considering accelerating the implementation of the TLS Server Name Indication (SNI) extension (see RFC 3546) in light of a recent IEBlog [http://blogs.msdn.com/ie/archive/2005/10/22/483795.aspx Upcoming HTTPS Improvements in Internet Explorer 7 Beta 2].


=== SQLite-Based Multiaccess Certificate and Key Databases ===
=== SQLite-Based Multiaccess Certificate and Key Databases ===
canmove, Confirmed users
937

edits