Fwd: Evaluating adding JOSE and JWS to mozilla-central

Ian Bicking ibicking at mozilla.com
Tue Aug 12 10:26:35 PDT 2014


Someone working on FxA might have an answer to this query...


---------- Forwarded message ----------
From: Gregory Szorc <gps at mozilla.com>
Date: Tue, Aug 12, 2014 at 12:22 PM
Subject: Evaluating adding JOSE and JWS to mozilla-central
To: dev-platform <dev-platform at lists.mozilla.org>


The possibility of using JavaScript Object Signing and Encryption (JOSE) -
specifically the verification part of the JSON Web Signature (JWS)
component - came up as part of planning a JavaScript-based feature I'm
working on.

We don't appear to have an implementation in mozilla-central yet. I'm
trying to weigh whether to spend extra effort to add JWS support to the
tree or to try to shoehorn existing signing solutions to fit my need.

First, does anyone know of an existing browser-side implementation of JWS
used by Mozilla? I know we have Python in Marketplace doing signing. We
/may/ have parts of Firefox OS doing client-side signing verification. My
requirement is for chrome-privileged JS to do X509 signing verification.
I'll settle for an XPIDL interface to NSS.

Second, would having JWS support in m-c be beneficial to anyone else?

If this isn't easy to add, I'll probably be lazy and leverage an existing
solution. Convince me it is worth doing.

Gregory
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.mozilla.org/pipermail/dev-fxacct/attachments/20140812/c85ea34c/attachment.html>


More information about the Dev-fxacct mailing list