File:  [mozdev] / certs / www / index.html
Revision 1.10: download - view: text, annotated - select for diffs - revision graph
Tue Oct 15 00:46:58 2002 UTC (15 years, 2 months ago) by eric
Branches: MAIN
CVS tags: HEAD
no message

<table>
  <tr>
    <td valign="top" width="100%"> 
      <!-- MAIN CONTENT -->
      <p><img src="product.gif" width="166" height="102">
      <p>Mozilla supports the signing of remote JavaScript with a certificate 
        so it may have enhanced privileges to do cool stuff not normally possible. 
      <p>&nbsp; 
      <table width="75%" border="0" align="center" bgcolor="#FFFF33">
        <tr> 
          <td align="left">
            <p><b>ATTENTION BOOK READERS:</b></p>
            <p>The section of Chapter 12, <a href="http://books.mozdev.org/chapters/ch12.html#77079">Certificate 
              Authorities and Digital Signatures</a> has some fundamental flaws 
              in the design of a Certificate Authority. Using the information 
              in this section <u>cannot</u> result in a legitimate and working 
              Certificate Authority for signed remote Mozilla applications.</p>
            <p>The information and examples in this section do, however, allow 
              you to create your own object signing certificate with Certutil 
              for use with Signtool <u>if you sign your applications with the 
              same key3.db that was generated by Certutil to create all your certificates 
              with</u>. The same private key in key3.db are required by Signtool 
              as created by Certutil.</p>
            <p>The information in the section is semi-useful because it is an 
              alternative to making self-signed JARs that are limited to 90 days, 
              and always nag the user if the script is allowed to run. However, 
              the user is <u>required to install the unique distribution certificate</u> 
              for your application. There will no longer be a standard MozDev 
              certificate.</p>
            <p><b>Good news:</b></p>
            <p>A draft of an updated Certificate Authorities and Digital Signatures 
              is being worked on <a href="cadraft.html">here</a>. It is <u>not</u> 
              near complete yet.</p>
            <p>-- <a href="mailto:ericmurphy@jabber.org">Eric Murphy</a></p>
            </td>
        </tr>
      </table>
      <p>&nbsp;
      <p>&nbsp;
    </td>

<!-- ***************** INFO/NEWS *************** -->
<td valign="top">
<table width="160">

<tr>
<td colspan=2><img src="http://www.mozdev.org/sharedimages/whatsnew_top.gif" width="154" height="15"><br></td>
</tr>

<tr>
<td valign=top><img src="http://www.mozdev.org/sharedimages/bullet.gif" width="10" height="10"></td>
<td valign=top> 
<font size="-1">
News item goes here
</font><br>
</td>
</tr>

</table>
<!-- ***************** INFO/NEWS *************** -->

</td>
</tr>
</table>

FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>