TLS Client Compatibility
Namecoin can be used for TLS certificate validation. This page covers Namecoin’s compatibility with various TLS implementations.
TLS Validation Library Compatibility
Positive Overrides | Negative Overrides | Strict Transport Security | |
---|---|---|---|
Chromium (all OS’s) | Not supported. | Supported via tlsrestrict_chromium_tool . |
Not supported. |
CryptoAPI (Windows) | Supported via ncdns’s certinject feature. |
Supported via certinject and name constraints property. | Not supported. |
mozilla::pkix/NSS/sqlite (OS’s with NSS certutil ) |
Supported via ncdns’s tlsoverridefirefox feature. |
Supported via tlsrestrict_nss_tool . |
Not supported. |
mozilla::pkix/NSS/sqlite (OS’s without NSS certutil ) |
Supported via ncdns’s tlsoverridefirefox feature. |
Not supported. | Not supported. |
mozilla::pkix/NSS/BDB | Supported via ncdns’s tlsoverridefirefox feature. |
Not supported. | Not supported. |
mozilla::pkix/NSS/PKCS#11 | Supported via ncp11. | Supported via ncp11. | Not supported. |
NSS/sqlite (OS’s with NSS certutil ) |
Supported via ncdns’s certinject feature. |
Supported via tlsrestrict_nss_tool . |
Not supported. |
WebExtensions (Asynchronous WebRequest) | Not supported. | Not supported. | Supported via DNSSEC-HSTS with Native Messaging. |
WebExtensions (Synchronous WebRequest) | Not supported. | Not supported. | Supported via DNSSEC-HSTS with HTTP API. |
TLS Application Compatibility
Positive Overrides | Negative Overrides | Strict Transport Security | |
---|---|---|---|
Chromium (GNU/Linux) Instructions |
Supported via NSS/sqlite. | Supported via Chromium. Supported via NSS/sqlite. |
Supported via WebExtensions (Synchronous WebRequest). |
Chromium (Windows) Automatically enabled by installer |
Supported via CryptoAPI. | Supported via CryptoAPI. | Not supported. |
Firefox (GNU/Linux) Instructions |
Supported via mozilla::pkix/NSS/sqlite. | Supported via mozilla::pkix/NSS/sqlite. | Supported via WebExtensions (Asynchronous WebRequest). |
Firefox (Windows) Instructions |
Supported via mozilla::pkix/NSS/sqlite. | Supported via mozilla::pkix/NSS/sqlite. | Not supported. |
Google Chrome (GNU/Linux) Instructions |
Supported via NSS/sqlite. | Supported via Chromium. Supported via NSS/sqlite. |
Not supported. |
Google Chrome (Windows) Automatically enabled by installer |
Supported via CryptoAPI. | Supported via CryptoAPI. | Not supported. |
Google Chrome Canary (GNU/Linux) | Supported via NSS/sqlite. | Supported via Chromium. Supported via NSS/sqlite. |
Not supported. |
Google Chrome Canary (Windows) Automatically enabled by installer |
Supported via CryptoAPI. | Supported via CryptoAPI. | Not supported. |
Opera (GNU/Linux) | Supported via NSS/sqlite. | Supported via Chromium. Supported via NSS/sqlite. |
Not supported. |
Opera (Windows) Automatically enabled by installer |
Supported via CryptoAPI. | Supported via CryptoAPI. | Not supported. |
Tor Browser (GNU/Linux) Instructions |
Supported via mozilla::pkix/NSS/PKCS#11. | Supported via mozilla::pkix/NSS/PKCS#11. | Supported via WebExtensions (Asynchronous WebRequest). |
Tor Browser (macOS) Instructions |
Supported via mozilla::pkix/NSS/PKCS#11. Untested |
Supported via mozilla::pkix/NSS/PKCS#11. Untested |
Not supported. |
Tor Browser (Windows) Instructions |
Supported via mozilla::pkix/NSS/PKCS#11. | Supported via mozilla::pkix/NSS/PKCS#11. | Not supported. |