Provide support for Origin-Bound Certificates.

ASSIGNED
Assigned to

Status

NSS
Libraries
P2
enhancement
ASSIGNED
7 years ago
3 years ago

People

(Reporter: Robert Nishihara, Assigned: Robert Nishihara)

Tracking

Firefox Tracking Flags

(Not tracked)

Details

(URL)

Attachments

(2 attachments, 1 obsolete attachment)

(Assignee)

Description

7 years ago
Origin-bound certificates are specified here <http://balfanz.github.com/tls-obc-spec/draft-balfanz-tls-obc-00.txt>.
(Assignee)

Comment 1

7 years ago
Created attachment 554253 [details] [diff] [review]
This is an implementation of the feature.

Updated

7 years ago
Assignee: nobody → rkn
Status: UNCONFIRMED → ASSIGNED
Component: Build → Libraries
Ever confirmed: true
Priority: -- → P2
QA Contact: build → libraries

Comment 2

6 years ago
Created attachment 565402 [details] [diff] [review]
Patch v2

I updated the patch to NSS 3.13 and made the following changes:

1. The default of the SSL_ENABLE_OB_CERTS option should be PR_FALSE.

2. Change the TLS extension number to 13175.
Attachment #554253 - Attachment is obsolete: true
The document cited in comment 0 of this bug no longer exists at that server.
A current copy of the draft should be found and attached to this bug report 
for posterity.

Comment 4

6 years ago
Created attachment 565997 [details]
Internet-Draft draft-balfanz-tls-obc-00.txt

The Internet-Draft has been submitted to IETF.  The URL is
http://tools.ietf.org/html/draft-balfanz-tls-obc-00.

Since then, we've changed the extension number from 0xff0f
to 13175.

Updated

6 years ago
See Also: → bug 681839
You need to log in before you can comment on or make changes to this bug.