Mozilla

change text under tabs as follows:

You have these certificates that identify you:

change "PSM Certificate Database" to "Software Security Device"

Change window title to "Choose Certificate BackupPassword"

new text:

The certificate backup password you set here protects the backupfile that you are about to create. You must set this passwordto proceedwith the backup.

Certificate backup password:
Certificate backup password (again):

current text:

Please enter the Personal Security Password for the PSM Certificate Database security device.

new text: 

Please enter the master password for the <name of token>security device.

For other tokens, <name of token> is the name reported by the token.
 

new text: 

The certificate backup password you set here protects  the backup file that you are about to create. You must set this passwordto proceed  with the backup.

Certificate backup password:

Certificate backup password (again): 

  This Backup All text from the top of the PSM 1.4 Backup All dialogis nolonger necessary:

You are backing up multiple certificates and privatekeys atonce. Versions of Communicator earlier than 4.71 thatdon't havePersonalSecurityManager installed will not be able to restorethe fileyou are creating.

Are you sure you want to delete these certificates?

[list of certs similar to Cert Mgr?]

After you delete a certificate, you can no longer use it to identifyyourself. 

shorten labels for new password fields to these:

New password:
New password (again):

No help section for PSM 2.0.
 

new text:

This certificate:  [hostname from cert]
was issued by: [name of issuer]

Because you do not trust the certificate authority that issued thiscertificate, you do not trust the authenticity of this certificate unlessotherwise indicated here.

Edit certificate trust settings:
x  Trust the authenticity of this certificate.
x  Do not trust the authenticity of this certificate.

[Edit button] Edit certificate authority trust settings.

ill this UI be changing,e.g.to show cert chain graphically?

not implemented as of 4/19/2001

Are you sure you want to delete these web site certificates?

[list of certs similar to Cert Mgr maini panel?]

If you delete a web site certificate, you will be asked to accept itagain the next time you visit the web site.

When they are, text should read like this:

Allow Netscape to update your CAs automatically from Netcenter

This certificate:

[name of cert]

represents a certificate authority.

Edit trust settings:
x   This certificate can identify web sites.
x   This certificate can identify mail users.
x   This certificate can identify software makers.

Click Help to learn about changing certificate authority trust settings.

No policy information found.

Not yet clear if help is needed or not.
 

Are you sure you want todelete these CA certificates?

[list of certs similar to Cert Mgr main panel?]

Click help to learn about the potentially serious implications of deletinga CA certificate.

These organizations vouch for this certificate:

layout issues TBD--text depends on presentation; unresolved issues includethe following:
- will this window indicate whether the cert has been verified or not,asin PSM 1.4? 
- how will this window handle situations where an  issuer's certfor an issuer displayedin the chain can't be found?
- how much to show here vs. a "View More Info" window that shows complete pretty print,like 1.4.
- what happens when multiple certs are selected and you click "View"?

Here's an example of the View dialog from PSM 1.4 (for a web site certificate):

• viewsitecert.gif

To test: Need machine w/ working smart card

Should not be necessary in PSM 2.0, since nicknames will be invisibletouser.Each cert listed separately.

No help section for PSM2.0.

You have been asked to trust a new certificate authority (CA).

Do you want to trust <CA name>  for the following purposes?

x Trust this CA ti identify web sites.
x Trust this CA to identify email users
x Trust this CA to identify software developers.

Before trusting this CA for any purpose, you should examine its certificateand its policy and procedures (if available).

<View> Examine CA certificate
<Policy> Examine CA policies and procedures 

<OK> <Cancel> <Help>

• newca1.gif
• newca2.gif

The original PSM 1.0 spec includes this note: "Nickname is set toCN bydefault. If this nickname is already taken,then pop up NEWROOT3."The thirdwindow asks the user to specify a nickname. Is this relevant forPSM 2.0?

<hostname> is a web site that uses a certificate to identifyitself. Netscape does not recognize the certificate authority that issuedthis web site's certificate.

You can choose to accept the certificate anyway as identification forthis web site:

r Accept this certificate permanently

r Accept this certificate temporarily for this session

r Do not acceptthiscertificate

To make sure you knowwhat you're accepting, click View.

<View> Examine web site certificate

<OK> <Cancel> <Help>

• newsitecert1.gif
• newsitecert2.gif

 

<hostname> is a site that uses a certificate to encryptdataduring transmission, but its certificate expired on <date>.

You should check to make sure that you computer's time (current setto <date&time>) is correct.

x Accept this certificate anyway for this session.

<View> View web site certificate

<OK> <Cancel> <Help>

Equivalent window frpm PSM 1.4:

• expiredsitecert.gif

<hostname> is a site that uses a certificate to encryptdataduring transmission, but its certificate is not valid until <date>.

You should check to make sure that you computer's time (current setto <date&time>) is correct.

x Acceptthis certificate anyway for this session.

<View> View web site certificate

  <OK> <Cancel> <Help>

Equivalent window from PSM 1.4: 

• notyetvalidsitecert.gif

You have attempted to establish a connection with <hostname>.However, the certificate presented belongs to the web site <hostname>. It is possible, though unlikely, that someone may be trying to interceptyour communication with this web site. 

If you suspect the certificate available below does not belong to knox.mcom.com,pleasecancel the connection and notify the site administrator.
 

<View> View web site certificate

<Continue Anyway>  <Cancel Connection> <Help>

Equivalent window in PSM 1.4:

• unexpectedcertname.gif

No help section for PSM 2.0.

No help section for PSM 2.0.

Use the Certificate Manager to manage certificates and securitydevices.

x Sending form data from an unencrypted page to an unencryptedpage

x Sendingform data from an encrypted page to an unencrypted page 

x Redirection from one encrypted page to another

x Redirection from an encrypted page to an unencrypted page

• change "Netscape" to "the browser"
• change "security certificate" to "certificate 
• change "Select Manually" to "Ask Every Time"

Text for first and last checkboxes is OK.

"Select Manually" suggests that Netscape itself isstill doing the selecting,which is confusing.

Signed & Encrypted Mail? 

No help sectionfor PSM 2.0.

Change box heading "Validation" to "OCSP Validation".

Change first two sentences to read like this: 

You can use the Online Certificate Status Protocol (OCSP) toverify certificates. Set OCSP usage as follows: