Recent NSS Releases & ESR Support

[Dennis Jackson]

Dear all,

NSS 3.68.4 was the last release of the 3.68 ESR series. NSS 3.79 is the new ESR release.

Major changes between NSS 3.68 (released 8th July 2021) and 3.79 (released 31st May 2022) are listed below. 

• DTLS 1.0 and 1.1 are disabled by default.
• Support for Encrypted Client Hello in TLS 1.3.
• mozilla::pkix now supports SHA-2 in OCSP responses.
• mozilla::pkix now supports RSA-PSS in certificates.
  
• mozilla::pkix no longer falls back to the subject common name by default.
  
• Numerous performance, security and minor bug fixes.

Please see the individual release notes for further details.

Best,

Dennis