Closed Bug 84215 Opened 23 years ago Closed 15 years ago

We need a new cert extension to prevent weak crypto.

Categories

(NSS :: Libraries, enhancement, P5)

Product:
NSS
Component:
Libraries
Type:
enhancement

Tracking

(Not tracked)

Status:
RESOLVED WONTFIX

People

(Reporter: rrelyea, Unassigned)

Details

We need a new critical cert extension that means 'never send weak crypto to this
user'. It has to be critical so that existing systems that don't understand the
extension won't accidently send weak crypto.

The rationale for this enhancement can be found in bug 84213.
target -> futre.
Version -> 2.0
Target Milestone: --- → Future
Version: 1.01 → 2.0
Mass assigning QA to ckritzer.
QA Contact: junruh → ckritzer
Enhancement
Priority: -- → P5
QA Contact: ckritzer → junruh
Version: 2.0 → 2.1
Mass reassign ddrinan's PSM bugs (with his permission) to nobody
Assignee: ddrinan0264 → nobody
QA Contact: junruh → nobody
Target Milestone: Future → ---
Product: PSM → Core
QA Contact: nobody → ui
Version: psm2.1 → 1.0 Branch
Version: 1.0 Branch → Trunk
Bob, you filed this RFE 7 years ago.  But the NSS team has not moved forward
to invent such an extension.  I'm not aware of any proposal for such an 
extension in any PKI-related forum (especially the IETF).  It appears to me 
that the NSS now views the creation of new non-standard extensions to be 
outside of our mission.  So, I recommend that this RFE be resolved with 
either WONTFIX or INCOMPLETE.
Assignee: nobody → nobody
Component: Security: UI → Libraries
Product: Core → NSS
QA Contact: ui → libraries
Version: Trunk → 3.1
No new non-standard extensions.
Status: NEW → RESOLVED
Closed: 15 years ago
Resolution: --- → WONTFIX
You need to log in before you can comment on or make changes to this bug.