From 2af679a0647cf726317617d3b1eb235002aedcf4 Mon Sep 17 00:00:00 2001 From: "cotter%netscape.com" Date: Tue, 6 Jun 2000 22:23:50 +0000 Subject: [PATCH] Latest fixes re SDR & pswd mgr. git-svn-id: svn://10.0.0.236/trunk@71626 18797224-902f-48f8-a5cc-f745e15eee43 --- mozilla/security/psm/doc/contents.htm | 2 +- mozilla/security/psm/doc/glossary.htm | 4 +- mozilla/security/psm/doc/help.htm | 53 ++++++++++++++++++--------- 3 files changed, 38 insertions(+), 21 deletions(-) diff --git a/mozilla/security/psm/doc/contents.htm b/mozilla/security/psm/doc/contents.htm index 885d6998232..e89c0560dda 100644 --- a/mozilla/security/psm/doc/contents.htm +++ b/mozilla/security/psm/doc/contents.htm @@ -161,7 +161,7 @@ Glossary


-© Copyright 1999 Netscape Communications Corporation +© Copyright 2000 Netscape Communications Corporation
diff --git a/mozilla/security/psm/doc/glossary.htm b/mozilla/security/psm/doc/glossary.htm index b2730ea56a4..5e401e3b32c 100644 --- a/mozilla/security/psm/doc/glossary.htm +++ b/mozilla/security/psm/doc/glossary.htm @@ -202,7 +202,7 @@ A protocol for accessing directory services across multiple platforms. LDAP is a master key.  -A symmetric key used by Personal Security Manager to encrypt information on behalf of other applications. For example, Netscape 6 uses Personal Security Manager and your master key to encrypt email passwords, web site passwords, and other stored identity information. See also symmetric encryption.

+A symmetric key used by Personal Security Manager to encrypt information on behalf of other applications. For example, Netscape 6 uses Personal Security Manager and your master key to encrypt email passwords, web site passwords, and other stored sensitive information. See also symmetric encryption.

misrepresentation.  @@ -267,7 +267,7 @@ One of a pair of keys used in public-key cryptography. The private key is kept s PSM Private Keys security device.  -The default security device used by Personal Security Manager to store private keys associated with your certificates. In addition to private keys, the PSM Private Keys security device stores the master key used by Netscape 6 to encrypt email passwords, web site passwords, and other identity information. See also private key, master key.

+The default security device used by Personal Security Manager to store private keys associated with your certificates. In addition to private keys, the PSM Private Keys security device stores the master key used by Netscape 6 to encrypt email passwords, web site passwords, and other sensitive information. See also private key, master key.

public key.  diff --git a/mozilla/security/psm/doc/help.htm b/mozilla/security/psm/doc/help.htm index 971eadc3331..a390ea0029f 100644 --- a/mozilla/security/psm/doc/help.htm +++ b/mozilla/security/psm/doc/help.htm @@ -60,7 +60,7 @@ The sections that follow provide basic information you should know before using About Personal Security Manager Help The document you are reading contains information about every Personal Security Manager window:

- + Terms in Personal Security Manager panels that are underlined and followed by a blue "i" icon are linked to glossary definitions: just click the term to see the definition. Similarly, you can click underlined terms in this help system to see a glossary definition: for example, certificate. To get back to the help section you were viewing before clicking a glossary definition, press the key equivalent to the Back button in your browser. For example, on Windows and most Unix machines, press and hold the Alt key and press the left arrow key. Some Unix machines use the Diamond key and the left arrow key for this shortcut.

 

@@ -587,7 +587,7 @@ It's easy to tell when the web site you are viewing is using an encrypted connec For many people, the lock icon provides sufficient information about a page's encryption status. If you want additional warnings, you can select one or more of the warning checkboxes in the Navigator section of the Applications tab. Think carefully about whether you want such warnings, since they can be annoying.

These are the choices you can make about Navigator warnings:

 -  + 

Selection of Certificate

@@ -657,7 +657,7 @@ When you click the Certificates tab in Personal Security Manager, you can view a Certificates—Mine

The Mine panel of the Certificates tab in Personal Security Manager allows you to examine and work with the certificates in your certificate store that identify you, and to set related security passwords. For instructions on how to use this panel, read the sections that follow.

 - + For short definitions, click certificate, certificate store, digital signature, encryption, or Personal Security Password. For an overview of Personal Security Manager and network security concepts, see Introduction to Personal Security Manager.

 

@@ -672,35 +672,52 @@ The following actions don't require a certificate to be selected first:

Choose a Personal Security Password

Your Personal Security Password protects keys associated with your identity, such as the key that protects your stored passwords or a private key associated with a certificate. These keys are stored on a security device, such as the default device maintained internally by Personal Security Manager (called PSM Private Keys security device) or an external smart card.

-The Personal Security Password for the default PSM Private Keys security device also protects your master key, which is a special key used by Personal Security Manager to encrypt information on behalf of other applications. For example, Netscape 6 uses Personal Security Manager and your master key to encrypt email passwords, web site passwords, and other stored identity information.

 +The Personal Security Password for the default PSM Private Keys security device also protects your master key, which is a special key used by Personal Security Manager to encrypt information on behalf of other applications. For example, Netscape 6 uses Personal Security Manager and your master key to encrypt email passwords, web site passwords, and other stored sensitive information.

-If someone uses your computer who knows or can guess the personal security password for any security device available to Personal Security Manager, that person can use email or access web sites while pretending to be you. This can be dangerous—for example, if you digitally sign important email messages or manage your financial accounts over the Internet. Therefore, it's important to select a personal security password that is difficult to guess. It's also important to record the password in a safe place—and not anywhere that's easily accessible to someone else. If you forget this password, you may not be able to access important information, such as web sites that require passwords or certificates, or encrypted mail stored on your computer.

+If someone uses your computer who knows or can guess the Personal Security Password for any security device available to Personal Security Manager, that person may be able to email or access web sites while pretending to be you. This can be dangerous—for example, if you digitally sign important email messages or manage your financial accounts over the Internet. Therefore, it's important to select a Personal Security Password that is difficult to guess. For help creating a password that's hard to guess, see Choose a Good Password.

+ +It's also important to record your Personal Security Password in a safe place—and not anywhere that's easily accessible to someone else. If you forget this password, you may not be able to access important information, such as web sites that require passwords or certificates or encrypted mail stored on your computer. For more information about the consequences of losing your Personal Security Password, see What To Do If You Forget Your Personal Security Password.

+ +For instructions on controlling the frequency with which Personal Security Manager requests your password, see Set the Frequency of Password Requests.

-Note that each security device requires a separate Personal Security Password. For example, if you are using one or more smart cards to store some of your certificates, you must set a separate Personal Security Password for each one.

 - -Choose a Good Password

+Note that each security device requires a separate Personal Security Password. For example, if you are using one or more smart cards to store some of your certificates, you must set a separate Personal Security Password for each one.

+  +

+ +Choose a Good Password

Good passwords have the following characteristics:

 -Set the Frequency of Password Requests

+  +

+ +Set the Frequency of Password Requests

The Personal Security Password window also allows you to set how often Personal Security Manager requires your Personal Security Password. Here are some things you should consider when selecting these options:

 -  +  +

+ +What To Do If You Forget Your Personal Security Password

+The consequences of forgetting your Personal Security Password vary depending on your use of certificates and, if you are using Netscape 6, your use of the Password Manager:

 + +Steps for resetting the Personal Security Password vary depending on which security device is involved. Unless you are using a smart card, the only one available is the PSM Private Keys security device, which is also where the master key used by the Netscape 6 Password Manager is stored

 + +To reset the Personal Security Password for the PSM Private Keys security device, follow these steps:

 +
    +

  1. Exit the browser (Communicator or Netscape 6).

  2. Delete your cert7.db and key3.db files. These are typically located in your user profile directory on Windows 95/98/NT (located by default in C:\\Program Files\Netscape\Users\), or in the directory in which the Netscape executable resides on Unix.

  3. Relaunch the browser.

  4. Click the lock icon to open Personal Security Manager.

  5. Click the Certificates tab, then click the Passwords button.

  6. Before setting your new Personal Security password, determine what the new password will be according to the instructions in Choose a Good Password. Record your new password in a safe place—and not anywhere that's easily accessible to someone else.

  7. Set the new Personal Security Password according to the instructions on the screen.

  8. Click Restore to restore your old certificates (if any). Unless you backed up all your certificates at once, you need to repeat this operation for each certificate.

  9. If you previously set up the Netscape 6 Password Manager to encrypt stored passwords and other sensitive information, you will need to reenter each of your passwords again as they are requested.
+ 

Choose a Portable Security Password

A portable security password protects one or more certificates that you are backing up using the Backup or Backup All button in the Mine section of the Certificates tab. Personal Security Manager asks you to set a portable security password when you back up certificates, and requests it when you attempt to restore certificates that have previously been backed up.

-Important: When you click the Backup All button, Personal Security Manager attempts to back up all of your certificates associated private keys stored on the default PSM Private Keys security device. Certificates backed up in this manner cannot be restored unless you are using Comunicator 4.71 or later versions, or unless you are using Communicator 4.7 with Personal Security Manager.

+Important: When you click the Backup All button, Personal Security Manager attempts to back up all of your certificates associated private keys stored on the default PSM Private Keys security device. Certificates backed up in this manner cannot be restored unless you are using Communicator 4.71 or later versions, or unless you are using Communicator 4.7 with Personal Security Manager.

The Backup All button does not back up any certificates that are stored on security devices other than the default PSM Private Keys device. For example, Backup All will not back up any certificates in the list that are stored on a smart card inserted in a smart card reader attached to your computer. Certificates stored on security devices other than PSM Private Keys must each be backed up individually by selecting the name of the certificate and clicking the Backup button.

 If someone obtains the file containing a certificate that you have backed up and successfully restores the certificate, that person can send messages or access web sites while pretending to be you. This can have negative consequences, for example, if you digitally sign important email messages or manage your bank or investment accounts over the Internet. Therefore, it's important to select a Portable Security Password that is difficult to guess. It's also important to record the password in a safe place—and not anywhere that's easily accessible to someone else. If you forget this password, you can't restore the backup of your certificate.

 -Good passwords have the following characteristics:

 -  +For help in choosing a good password, see Choose a Good Password.

+ 

Delete My Certificate

@@ -876,7 +893,7 @@ View Security Certificate

 The View Security Certificate window displays information about the certificate you selected in one of the panels available under the Certificate tab. You can also click View More Info in the top right corner of the window to see a complete text version of the certificate (normally of interest to IS professionals only).

 The View Security Certificate window shows the following information about the selected certificate:

-