680292 - Provide support for Origin-Bound Certificates.

Status: NEW

(NSS :: Libraries, enhancement, P2)

Description

[Robert Nishihara]

Origin-bound certificates are specified here <http://balfanz.github.com/tls-obc-spec/draft-balfanz-tls-obc-00.txt>.

Comment 1

[Robert Nishihara]

Attachment: This is an implementation of the feature.

Comment 2

[Wan-Teh Chang]

Attachment: Patch v2

I updated the patch to NSS 3.13 and made the following changes:

1. The default of the SSL_ENABLE_OB_CERTS option should be PR_FALSE.

2. Change the TLS extension number to 13175.

Comment 3

[Nelson Bolyard (seldom reads bugmail)]

The document cited in comment 0 of this bug no longer exists at that server.
A current copy of the draft should be found and attached to this bug report 
for posterity.

Comment 4

[Wan-Teh Chang]

Attachment: Internet-Draft draft-balfanz-tls-obc-00.txt

The Internet-Draft has been submitted to IETF.  The URL is
http://tools.ietf.org/html/draft-balfanz-tls-obc-00.

Since then, we've changed the extension number from 0xff0f
to 13175.

Comment 5

[BugBot [:suhaib / :marco/ :calixte]]

The bug assignee didn't login in Bugzilla in the last months and this bug has priority 'P2'.
:beurdouche, could you have a look please?
For more information, please visit auto_nag documentation.

Comment 6

[Marco Castelluccio [:marco]]

We have modified the bot to only consider P1 as high priority, so I'm cancelling the needinfo here.