MozillaZine

M14 to Contain Crypto Code!

Monday February 28th, 2000

That's right, Mozilla.org plans to land the newly opened crypto code on the M14 branch, which will "allow [mozilla.org] to get crypto out to the public, without affecting stability of the tip." But before they push a final M14 out, they want to get some good testing done of the crypto-enabled builds, and we plan to help them out with surveys or polls to gauge user opinion. We should know more Tuesday about when crypto will land in the branch; we'll let you know as soon as we hear anything.

You can read more about the crypto landing in Christine Begle's post to the n.p.m.seamonkey newsgroup.


#10 Re: Crypto... really?

by frankhecker <hecker@hecker.org>

Tuesday February 29th, 2000 9:06 AM

You are replying to this message

To answer your questions:

The "crypto code" that is being added includes a Mozilla protocol handler for https (HTTP over SSL) support; the protocol handler will call out to a Personal Security Manager (PSM) implementation which will actually perform the SSL protocol and the accompanying encryption and decryption. Some of the PSM source code has already been released at <http://www.mozilla.org/projects/security/pki/> but the third-party source code for RSA, etc., has not been. Thus in the meantime the PSM developers at iPlanet E-Commerce Solutions (formerly the Sun-Netscape Alliance) will be releasing a binary-only version of PSM which contains all the necessary RSA, etc., code and which can be installed and used with Mozilla M14, once the necessary https hooks are added to it.

So, yes, the plan is to create binary M14 releases that when installed with the binary PSM releases will be able to connect to secure sites using https, so that M14 users will be able to buy books, connect to banking or stock trading sites, or anything else that requires SSL support.

(As a side note, the SSL support in PSM includes support for SSL client authentication, for anyone who cares about that feature. Also, the current PSM version will _not_ support S/MIME secure email with Mozilla; that feature will have to wait for future development.)

As for release dates, the final "M14 plus crypto" plans are still in the process of being hashed out. For the latest news check out the netscape.public.mozilla.crypto newsgroup.