Paul Wouters <paul@nohats.ca> writes:
We go to Mozilla and add support to NSS/NSPR, boom, all Mozilla applications now do it correctly out of the box.
Having been on the sidelines of two attempts to get this done, I wish you a lot of luck. I really hope you succeed, but at the moment I wouldn't focus on Mozilla. They are not helpful at the moment.
For reference, we (the dnssec-tools project) filed this bug *with a patch* 7 years ago: https://bugzilla.mozilla.org/show_bug.cgi?id=748232 They aren't interested in DNSSEC (and at public venues have stated negative opinions about it as well). Originally it was on their roadmap, but the browser industry then fell into the speed-war and page load speeds dominated all other measurements of success. Thus, extra DNS lookups was a non-starter. -- Wes Hardaker USC/ISI