Thunderbird:Autoconfiguration:DNSBasedLookup: Difference between revisions

(→‎Definitions: Must check domain of email address (not HTTP host) against cert)
Line 79: Line 79:
=== Implementation in Thunderbird ===
=== Implementation in Thunderbird ===


This is not trivial to implement, as [http://groups.google.com/group/mozilla.dev.apps.thunderbird/browse_thread/thread/e8bdb0af31961908/d9810a0056106917?lnk=st&q=thunderbird+dmose+DNS#d9810a0056106917 dmose says], because Mozilla has no API to fetch arbitrary DNS records (like TXT), only to resolve hostnames (A records).
DNS record fetches are not trivial to implement, as [http://groups.google.com/group/mozilla.dev.apps.thunderbird/browse_thread/thread/e8bdb0af31961908/d9810a0056106917?lnk=st&q=thunderbird+dmose+DNS#d9810a0056106917 dmose says], because Mozilla has no API to fetch arbitrary DNS records (like TXT), only to resolve hostnames (A records).
 
Checking the SSL cert's domain name against an arbitary domain name (in our case the email address domain) may or may not be easy with Mozilla's APIs, unclear.
Confirmed users
596

edits