MozillaZine

Weekend Discussion

Friday February 18th, 2000

What *one* feature would you most like Mozilla to have by final release? If it's already on the slate to be in the final release, let us know why it's important to you. Just click the Responses link to join the conversation! Our forums are quite civil, and we'd love to hear your opinions.


#253 Re: Re: SSL/HTTPS - TLS

by zerucha

Wednesday February 23rd, 2000 2:19 PM

You are replying to this message

SSL uses RSA (which is patented) and some symmetric protocols which are also patented.

Depending on which SSL library (OpenSSL perhaps), you can compile a non-infringing shared library and link against that. If the server supports TLS (which is the "open" SSL standard), you could still access https and snews links.

Then when the RSA patent expires, update libssl.so/libcrypto.so (or dll, etc.).

Also, RSA is ONLY patented in the US. It is legal to use sans licensing fees everywhere else I know of (other laws may apply).

The other way is to enable the secure proxy and punt the SSL to the proxy. This is how Lynx (the browser) does it.

<http://www.crl.com/%7Esubir/lynx.html>, check the FAQ-o-matic under security.