TLS Client Compatibility
Namecoin can be used for TLS certificate validation. This page covers Namecoin’s compatibility with various TLS implementations.
TLS Validation Library Compatibility
| Positive Overrides | Negative Overrides | Strict Transport Security | |
|---|---|---|---|
| Chromium (all OS’s) | Not supported. | Supported via tlsrestrict_chromium_tool. |
Not supported. |
| CryptoAPI (Windows) | Supported via ncdns’s certinject feature. |
Supported via certinject and name constraints property. | Not supported. |
mozilla::pkix/NSS/sqlite (OS’s with NSS certutil) |
Supported via ncdns’s tlsoverridefirefox feature. |
Supported via tlsrestrict_nss_tool. |
Not supported. |
mozilla::pkix/NSS/sqlite (OS’s without NSS certutil) |
Supported via ncdns’s tlsoverridefirefox feature. |
Not supported. | Not supported. |
| mozilla::pkix/NSS/BDB | Supported via ncdns’s tlsoverridefirefox feature. |
Not supported. | Not supported. |
| mozilla::pkix/NSS/PKCS#11 | Supported via ncp11. | Supported via ncp11. | Not supported. |
NSS/sqlite (OS’s with NSS certutil) |
Supported via ncdns’s certinject feature. |
Supported via tlsrestrict_nss_tool. |
Not supported. |
| WebExtensions (Asynchronous WebRequest) | Not supported. | Not supported. | Supported via DNSSEC-HSTS with Native Messaging. |
| WebExtensions (Synchronous WebRequest) | Not supported. | Not supported. | Supported via DNSSEC-HSTS with HTTP API. |
TLS Application Compatibility
| Positive Overrides | Negative Overrides | Strict Transport Security | |
|---|---|---|---|
| Chromium (GNU/Linux) Instructions |
Supported via NSS/sqlite. | Supported via Chromium. Supported via NSS/sqlite. |
Supported via WebExtensions (Synchronous WebRequest). |
| Chromium (Windows) Automatically enabled by installer |
Supported via CryptoAPI. | Supported via CryptoAPI. | Not supported. |
| Firefox (GNU/Linux) Instructions |
Supported via mozilla::pkix/NSS/sqlite. | Supported via mozilla::pkix/NSS/sqlite. | Supported via WebExtensions (Asynchronous WebRequest). |
| Firefox (Windows) Instructions |
Supported via mozilla::pkix/NSS/sqlite. | Supported via mozilla::pkix/NSS/sqlite. | Not supported. |
| Google Chrome (GNU/Linux) Instructions |
Supported via NSS/sqlite. | Supported via Chromium. Supported via NSS/sqlite. |
Not supported. |
| Google Chrome (Windows) Automatically enabled by installer |
Supported via CryptoAPI. | Supported via CryptoAPI. | Not supported. |
| Google Chrome Canary (GNU/Linux) | Supported via NSS/sqlite. | Supported via Chromium. Supported via NSS/sqlite. |
Not supported. |
| Google Chrome Canary (Windows) Automatically enabled by installer |
Supported via CryptoAPI. | Supported via CryptoAPI. | Not supported. |
| Opera (GNU/Linux) | Supported via NSS/sqlite. | Supported via Chromium. Supported via NSS/sqlite. |
Not supported. |
| Opera (Windows) Automatically enabled by installer |
Supported via CryptoAPI. | Supported via CryptoAPI. | Not supported. |
| Tor Browser (GNU/Linux) Instructions |
Supported via mozilla::pkix/NSS/PKCS#11. | Supported via mozilla::pkix/NSS/PKCS#11. | Supported via WebExtensions (Asynchronous WebRequest). |
| Tor Browser (macOS) Instructions |
Supported via mozilla::pkix/NSS/PKCS#11. Untested |
Supported via mozilla::pkix/NSS/PKCS#11. Untested |
Not supported. |
| Tor Browser (Windows) Instructions |
Supported via mozilla::pkix/NSS/PKCS#11. | Supported via mozilla::pkix/NSS/PKCS#11. | Not supported. |