|
|
| Line 15: |
Line 15: |
| Many people ask us which version of the Mozilla clients (Firefox browser and Thunderbird mail client) will contain a FIPS 140-2 validated cryptographic module. These plans are still being reviewed, but we expect Mozilla to be able to ship the FIPS 140-2 validated module in the 2.0 release. [http://weblogs.mozillazine.org/roadmap/archives/2005_12.html Here is the current Firefox Roadmap]. Of course, any change in the NSS schedule or the Mozilla schedule could cause this target to move. | | Many people ask us which version of the Mozilla clients (Firefox browser and Thunderbird mail client) will contain a FIPS 140-2 validated cryptographic module. These plans are still being reviewed, but we expect Mozilla to be able to ship the FIPS 140-2 validated module in the 2.0 release. [http://weblogs.mozillazine.org/roadmap/archives/2005_12.html Here is the current Firefox Roadmap]. Of course, any change in the NSS schedule or the Mozilla schedule could cause this target to move. |
|
| |
|
| = NSS 3.11.1 =
| |
|
| |
|
| == NSS 3.11.1 Features ==
| |
|
| |
| === OCSP HTTP Client Callback ===
| |
|
| |
| We will add OCSP HTTP client callback support ([https://bugzilla.mozilla.org/show_bug.cgi?id=152426 Bugzilla bug 152426]) so that Firefox 2.0 can do OCSP through a proxy server ([https://bugzilla.mozilla.org/show_bug.cgi?id=111384 Bugzilla bug 111384]).
| |
|
| |
| === Elliptic Curve Cryptography ===
| |
|
| |
| The NSS codebase currently contains [http://en.wikipedia.org/wiki/Elliptic_curve_cryptography Elliptic Curve Cryptography (ECC)] algorithms donated by Sun Labs; however, they are turned off by default in the builds script. In this release we will implement the ECC TLS cipher suites specified in RFC 4492 ([https://bugzilla.mozilla.org/show_bug.cgi?id=236245 Bugzilla bug 236245]).
| |
|
| |
| This work was originally scheduled for NSS 3.12. We have decided to do it earlier in NSS 3.11.1.
| |
|
| |
| === TLS Server Name Indication ===
| |
|
| |
| We are considering accelerating the implementation of the TLS Server Name Indication (SNI) extension (see RFC 3546) in light of a recent IEBlog [http://blogs.msdn.com/ie/archive/2005/10/22/483795.aspx Upcoming HTTPS Improvements in Internet Explorer 7 Beta 2].
| |
|
| |
| This work was originally scheduled for NSS 3.12. We have decided to do it earlier in NSS 3.11.1.
| |
|
| |
|
| = NSS 3.11.2 = | | = NSS 3.11.2 = |