General Information

• Netscape Security Solutions. A summary of Netscape's security technologies and product offerings.
• Security Newsgroup. Ongoing discussions about object signing and other Netscape security technologies.
• Interoperable Security by Marc Andreessen. A technical news column discussing Netscape's security philosophy and vision.
• Security Documentation on DevEdge. The main DevEdge area for security documentation.
• Server Central. Information about Netscape server products.
• Netscape Servers. SuiteSpot documentation on DevEdge.
• RSA Data Security. Home page for RSA Data Security. Information on public-key cryptography, links to PKCS and S/MIME documentation.
• IETF. Home page for the Internet Engineering Task Force.

Public-Key Cryptography

• Netscape's Use of Public-Key Cryptography. Introduces many key concepts of public-key cryptography. This is Appendix A of the Single Sign-On Deployment Guide.
• Cryptographic Algorithms. Lists commonly used cryptographic algorithms and methods, with references.
• Bruce Schneier, Applied Cryptography (Wiley, 1996). A comprehensive technical discussion of cryptography and cryptographic algorithms, including public-key cryptography.

Security Standards

CDSA

• Intel Data Security Home Page. Main Intel page for all CDSA information
• Common Data Security Architecture (CDSA). CDSA overview and specifications.

CGI

• CGI: Common Gateway Interface. Information about the CGI interface.

CORBA

• OMG Home Page. Information about the OMG and CORBA.
• CORBA: Catching the Next Wave. White paper on Netscape's plans for Corba.
• CORBA meets Java - JavaWorld - October 1997. JavaWorld article on CORBA and Java.
• SSL/CORBA. Secure Sockets Layer/CORBA Security RFP submission.

IPSec

• IPsec. Information about the IP Security Protocol Working Group of IETF.

Kerberos

• Kerberos. General description of the Kerberos authentication protocol, from MIT.

LDAP

• LDAP. Information about the Lightweight Directory Access Protocol (LDAP), from the University of Michigan.
• LDAP: The Internet's Latest Great Protocol Experiment. Network Computing article.
• Directories and LDAP: Universal Access to Directory Information. View Source article.

PKCS

• PKCS. General information on the PKCS standards developed by RSA Laboratories.
• PKCS #7. Description of the Cryptographic Message Syntax Standard, from RSA Laboratories.
• PKCS #10. Description of the Certification Request Syntax Standard, from RSA Laboratories.
• PKCS #11. Description of the Cryptographic Token Interface Standard for smartcards, from RSA Laboratories.
• PKCS #12. Description of the Personal Information Exchange Syntax Standard for key portability, from RSA Laboratories.

PKIX

• PKIX drafts. An index to the current Public-Key Infrastructure Internet Drafts, from IETF.
• IETF Home Page
• Warwick Ford and Michael S. Baum, Secure Electronic Commerce (Prentice Hall PTR, 1997). Includes a good overview of PKIX issues.

SASL

• SASL. Internet Draft describing the Simple Authentication and Security Layer.

SET

• MasterCard International - Secure Electronic Transaction (SET). Overview of SET.

S/MIME

• S/MIME. Description of the S/MIME standard, from RSA Laboratories.

SSL and TLS

• SSL. An overview of Netscape's Secure Sockets Layer protocol for authentication and encryption.
• SSL 3.0. The SSL Protocol version 3.0 Internet Draft.
• The TLS Protocol Version 1.0. TLS (Transport Layer Security) Protocol version 1 Internet Draft, from IETF.
• SSL/CORBA.  Secure Sockets Layer/CORBA Security RFP submission.
• SSL-Talk FAQ v1.0.3. External FAQ.

SOCKS

• SOCKS v.5. Download page for the SOCKS Protocol version 5 Internet Draft, from IETF.

Authentication and Access Control

• Single Sign-On Deployment Guide. Describes how to deploy a single sign-on solution using Netscape clients and servers.
• Access Control Programmer's Guide. Describes how to programmatically extend the access control features of Netscape Enterprise Server.

Messaging and Workflow

• Messaging Server. General information about the Netscape Messaging Server.
• Netscape S/MIME. An overview of Netscape's implementation of digitally signed and encrypted electronic mail.

E-Commerce

• Netscape Form Signing. An overview of Netscape resources related to form signing.
• Netscape Electronic Commerce Solutions. Information about Netscape e-commerce products.
• Simson Garfinkel with Gene Spafford,Web Security & Commerce (O'Reilly & Associates, 1997). An in-depth discussion of Web security issues, cryptography, and applications to electronic commerce.

Management and Administration

Mission Control

• Netscape Mission Control. White paper on the new Mission Control architecture.
• Mission Control Desktop. An overview of the Mission Control Desktop, a set of tools for centrally managing clients in an enterprise.
• Netscape Mission Control Guide. Online documentation for Mission Control Desktop.

Directory Server

• Directory Server. General information about the Netscape Directory Server.
• Netscape Directory Server Deployment and Installation Manual. Guide to directory deployment with Directory Server 3.0

Certificate Server and Certificates

• Certificates. An index to Netscape documents explaining digital certificates and certificate authorities.
• Certificate Authority Program. An overview of the Netscape Certificate Authority Program.
• Certificate Authority Services. A listing of some certificate authorities that issue certificates for Netscape products.
• Certificate Server. General information about the Netscape Certificate Server.
• Netscape Certificate Specifications.  Public list of specifications related to Netscape's use of certificates.
• Certificate Mapping API Programmer's Guide. Shows how to programmatically change the way Netscape servers use certificates and LDAP entries to authenticate users.

Application Development

Object Signing

• Netscape Object Signing Resources. An overview of Netscape resources related to object signing.
• Netscape Object Signing: Establishing Trust for Downloaded Software. High-level overview of object signing.
• Java Capabilities API. Overview of DevEdge resources related to the Java Capabilities API.
• Object-Signing Tools. Download page for current signing tools, including links to current tools documentation.
• JAR Format. Describes the JAR archive format and how to create a JAR file.
• The JavaScript Security Model in Communicator 4.x. Describes how to use object signing with JavaScript.

Smart Card Support and PKCS #11

• Implementing PKCS #11 for the Netscape Security Library. Describes how the Netscape Security Library calls functions defined by version 2.0 of the PKCS #11 specification.
• Using the JAR Installation Manager to Install a PKCS #11 Cryptographic Module. Describes how to prepare a PKCS #11 cryptographic module so that users can download it from the Internet, verify its integrity, and install it.
• PKCS #11_FAQ. An FAQ for implementors of PKCS #11 cryptographic modules.
• FORTEZZA. A description of Netscape's products that support FORTEZZA hardware-enhanced security services.

Proxy Server

• Proxy Server. General information about the Netscape Proxy Server.
• Netscape Proxy Server Deployment Guide. Describes how to deploy the Netscape Proxy Server. Explains basic proxy concepts.