Confirmed users
596
edits
(→Definitions: Must check domain of email address (not HTTP host) against cert) |
(→Implementation in Thunderbird: cert checking) |
||
| Line 79: | Line 79: | ||
=== Implementation in Thunderbird === | === Implementation in Thunderbird === | ||
DNS record fetches are not trivial to implement, as [http://groups.google.com/group/mozilla.dev.apps.thunderbird/browse_thread/thread/e8bdb0af31961908/d9810a0056106917?lnk=st&q=thunderbird+dmose+DNS#d9810a0056106917 dmose says], because Mozilla has no API to fetch arbitrary DNS records (like TXT), only to resolve hostnames (A records). | |||
Checking the SSL cert's domain name against an arbitary domain name (in our case the email address domain) may or may not be easy with Mozilla's APIs, unclear. | |||