Re: Re: [Epiphany] 1.2 plan revisited

["Piers Cornwell" <piers myrealbox com>]

Robert, what do you think to just implementing User Certs first?

Had a quick look at your mockups for PDM/CA managing: I couldn't see anywhere to set the master password -- were you thinking of putting this somewhere else?

Also, I don't really like having the "Manage Certificate Authorities" button visible when you're viewing User Certificates (since it's not relevent there).

Also, what does the "Properties" button do?

Marco, on a sidenote, i think we can ignore everything about CRLs/OCSP for now. In the long term future we could have some logic whereby if the user is online and the certificate specifies an OCSP location, we could validate against that.

Thanks,

-Piers

-----Original Message-----
From: Robert Marcano <robert@marcanoonline.com>
To: Piers Cornwell <piers@myrealbox.com>
Date: 27 Oct 2003 09:29:26 -0400
Subject: Re: [Epiphany] 1.2 plan revisited

On Sat, 2003-10-25 at 08:06, Piers Cornwell wrote:
> Hi,
> 
> I think it makes sense for us to kick off by supporting User 
> Certificates. We can do this without worrying about website and CA certs 
> for now.
> 
> As background, you may want to read Marcos certs overview here:
> http://www.gnome.org/~marco/security-spark.html
> 
> The general user model for User Certs is layed out here:
> http://www.sparknet.pwp.blueyonder.co.uk/user-certs.htm
> 
> A concept for the main bit of UI involed:
> http://www.sparknet.pwp.blueyonder.co.uk/certui.txt
> ...this doesn't include the dialogs that simply ask you for the password 
> - it should be fairly obvious how they'd look.
> 
> This is pretty similar to Roberts previous UI mockup 
> (http://bugs.gnome.org/showattachment.cgi?attach_id=20406) but 
> integrated with PDM. Robert: Is it possible to just have a list of certs 
> instead of Mozillas treeview?

I captured a proposal of a PDM integrated Certificate Manager (files are
attached to the bug). I separated the CA certificates to a different
dialog in order to show to the user only the basic certificates
(personal and server). It follows the same pattern that is used in the
settings dialog for the language selection: let the user select a
language but more advanced settings are managed by a different Languages
Dialog

The current patch does not show the certificates as a tree, i thought
that it is not useful to look them as as tree because simple actions
like ordering by name/description can not be done in an easy to read way


> FYI, screenshots of the user model given above in Internet Explorer:
> http://www.sparknet.pwp.blueyonder.co.uk/ie.htm
>
> Comments, suggestions?
>
> Thanks.
>
> -Piers