Slashdot Mirror


Mozilla With Crypto Code Released

physicman writes "I just read on MozillaZine that there is finally a release containing the new crypto code. This means we will eventually get the chance to get access to secure Websites with our favorite nearly-in-beta-stage browser. " Mozilla's really been making a lot of progress recently -- and it looks great.

5 of 136 comments (clear)

  1. Don't get excited yet; wait until after 9/20/2000 by David+Jao · · Score: 5
    It's certainly great news to see Mozilla release crypto-anything, but I find this release underwhelming in several aspects. In order to actaully use any of the crypto, you need a binary-only "Personal Security Manager" from iplanet that is only available for Windows and Linux systems.

    Of course this is not Netscape's or Mozilla's fault. The fault lies entirely with RSA Data Laboratories, who refuse to license their patented RSA algorithm to any open source projects. While liberalization of US export laws is very nice, I think we're going to have to wait until after the RSA patent expires on Sept. 20 before people outside of Netscape (well, US citizens anyway) can start to tinker with the cryptography software themselves.

    It's fascinating how RSA Data Laboratories was able to force the whole world to use RSA as their public key cryptography standard instead of the technically superior Diffie-Hellman/El Gamal algorithm. They did this by simply refusing to license Diffie-Hellman to anybody (yes, they owned a patent on that, back before it expired in 1997). Today the Diffie-Hellman algorithm has been out of patent protection for 3 years, but almost nobody uses it, because of the need to remain compatible with the large installed base of software that was forced to use RSA.

    Let's hope the current patent shenanigans that are holding back Mozilla crypto are the last adverse effects that the open source community will ever see from RSA Data Laboratories, Inc.

  2. Re:Don't get excited yet; wait until after 9/20/20 by MRK · · Score: 4

    Someone outside the U.S. could implement a plugin that has the same API's as the binary iPlanet plugin using openssl library ... and then we wouldn't need to wait until the RSA patent expires...

  3. This is vital by riggwelter · · Score: 4
    In addition to office productivity software (StarOffice, KOffice, GNOME Office, ApplixWare - OK, that one's pretty well on the way to being sorted) the other major issue that the Open Source community needs to address is internet accessibility, and more specifically ease of use once online.

    Much as I hate to admit it, Internet Explorer is the browser to beat, largely because of M$'s [illegal?] bundling of it with the OS and OS integration, the average home user wants to be able to click on an icon that's there when they get their PC - that's IE.

    Mozilla is the only option for a compliant 'next-generation' browser. The browsers of the near future are going to have to be a one-stop-shop for net usage encompassing browsing with mail, news, instant messaging, chat, streaming media etc etc. This is possible with Mozilla. In addition, they have to be SECURE. When the traditional media report on the internet, and it's one of the rare occasions when it's not about porn, it's about shopping online, banking online, share dealing online. Security is a big BIG issue here.


    People who say they shouldn't be including this in beta software have clearly missed the point of beta software. If it doesn't get beta tested, how the hell is it ever going to be made ready for release to the general public?


    Go, download this version, test it, try it, even buy stuff with it, be as careful when doing so as you should be with any browser, but most of all, when you break it report it or fix it.

    --

    --
    Listening for the sound of the coming rain...
  4. Bad Useragent Checking, and Upgrade your browser. by jelwell · · Score: 4
    I've been using the crypto version for a couple of days now (as a third party developer on the Mozilla project). I've noticed a lot of SSL sites actively enforce browser agents be what they believe to be the most current web browsers. Wellsfargo does this among others. In paticular wellsfargo won't let you sign in with Mozilla because it asks you to "Upgrade" to Netscape 4.X. That's a downgrade in my opinion.

    I've created a template form that you can fill out and then copy the results into your e-mail client to mail off to websites that aren't allowing you to log in because it thinks you should "Upgrade your browser".

    Joseph Elwell.

  5. Mozilla gui sucks, par for linux by slashdot-me · · Score: 4

    First off, performance and real usability issues should always take priority over eye candy. I don't have resources to waste on pretty bs.

    Why does mozilla break all the user interface rules (like middle button scrolling)? This pisses me off because they must have spent a bundle of time reimplementing the entire keyboard/mouse logic (incorrectly). Don't fix [break] it if it isn't broken.

    For an OS that started on text terminals, linux sure jacked up it's keyboard handling. Back in my windows days I didn't use the mouse (ever, 'cept browsing). With linux I have to use it all the time. I suppose it's really the windows manager / x server / apps fault but it makes the whole system suck.

    If you disagree you can post you reasons. If you have no reasons moderate me down instead.

    Ryan