4 ms·

I don't understand why NSS[1] isn't more highly regarded. It's the crypto library that both Chrome and Firefox use, and it has a comparatively good security rec

I don't understand why NSS[1] isn't more highly regarded. It's the crypto library that both Chrome and Firefox use, and it has a comparatively good security record[2]. [1] https://developer.mozilla.org/en-US/docs/NSS https://developer.mozilla.org/en-US/docs/NSS [2] http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=nss http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=nss

nly 13y ago
It's regarded enough to be used by Java, Flash, Networkmanager, and Libreoffice... API is very low level though when all you want is a secure socket.
- timclassic 13y ago
  Exactly.
hyc_symas 13y ago
NSS was designed for use in single-user browsers and the API is completely unsuitable for more general, multi-user system-wide deployment. https://wiki.mozilla.org/NSS_Library_Init https://wiki.mozilla.org/NSS_Library_Init RedHat has misguidedly chosen to base all of its security infrastructure on NSS, even though NSS was never designed for such a use. It is completely inappropriate for servers, multi-user workstations, etc.
- blahbl4hblahtoo 13y ago
  Having a system wide certificate store is a good idea, though...
cpeterso 13y ago
Chrome is dropping NSS for OpenSSL: https://docs.google.com/document/d/1ML11ZyyMpnAr6clIAwWrXD53pQgNR-DppMYwt9XvE6s/edit?pli=1 https://docs.google.com/document/d/1ML11ZyyMpnAr6clIAwWrXD53...