Showing posts with label TLS. Show all posts
Showing posts with label TLS. Show all posts

NSS 3.15.1 brings TLS 1.2 support to Firefox

Network Security Services (NSS), the collection of cryptographic libraries which is used by, among others, Mozilla's Firefox browser, now supports TLS 1.2 with the release of its latest version. TLS 1.2 supports HMAC-SHA256 ciphers for the generation of pseudorandom numbers, and so allows the usage of TLS without MD5 and SHA-1 algorithms. NSS 3.15.1 also introduces a number of new types, most of which have to do with the new TLS version, along with a number of smaller changes and bug fixes.

http://www.h-online.com/security/news/item/NSS-3-15-1-brings-TLS-1-2-support-to-Firefox-1918133.html
Network Security Services

RFC: Certificate Transparency. Interesting attempt to make CA actions auditable.

IETF
An experimental protocol for publicly logging the existence of Transport Layer Security (TLS) certificates as they are issued or observed, in a manner that allows anyone to audit certificate authority (CA) activity and notice the issuance of suspect certificates as well as to audit the certificate logs themselves. The intent is that eventually clients would refuse to honor certificates that do not appear in a log, effectively forcing CAs to add all issued certificates to the logs.