Platform/2014-02-25: Difference between revisions

m
Line 152: Line 152:
===Seceng (mmc)===
===Seceng (mmc)===
{{readonly}}
{{readonly}}
* Support for OCSP ({{bug|915931}}) and certificate error overrides ({{bug|975122}}) were added to insanity::pkix, the new certificate verification library replacing NSS's certificate verification. insanity::pkix for TLS is still pref'd-off (security.use_insanity_verification=false). It is expected to be enabled soon, after EV support ({{bug|921895}}) and OCSP caching ({{bug|915932}} are added, and after more testing is done. If you don't care about your own HTTPS security and you play with this, please report any issues, particularly compatibility issues, in the "Core :: Security: PSM" component ASAP.  
* Support for OCSP ({{bug|915931}}) and certificate error overrides ({{bug|975122}}) were added to insanity::pkix, the new certificate verification library replacing NSS's certificate verification. insanity::pkix for TLS is still pref'd-off (security.use_insanity_verification=false). It is expected to be enabled soon, after EV support ({{bug|921895}}) and OCSP caching ({{bug|915932}}) are added, and after more testing is done. If you don't care about your own HTTPS security and you play with this, please report any issues, particularly compatibility issues, in the "Core :: Security: PSM" component ASAP.  


* Signed packaged app installation, based on insanity::pkix, was uplifted to Aurora 29 ({{bug|896620}}). While it is unclear which release packaged app installation will officially get enabled for, with this you can already play Cut-the-Rope in Firefox 29 Aurora and Firefox 30 Nightly (tested on Windows):
* Signed packaged app installation, based on insanity::pkix, was uplifted to Aurora 29 ({{bug|896620}}). While it is unclear which release packaged app installation will officially get enabled for, with this you can already play Cut-the-Rope in Firefox 29 Aurora and Firefox 30 Nightly (tested on Windows):
Confirmed users
69

edits