How does NSS compare to SSLRef?
SSLRef was an early reference implementation of the SSL protocol. It contains bugs that were never fixed, doesn’t support TLS or or the new 56-bit export cipher suites, and does not contain the fix to the Bleichenbacher attack on PKCS#1. Netscape no longer maintains SSLRef or makes it available. It was built as an example of an SSL implementation, not for creating production applications. NSS was designed from the ground up for use by commercial developers. It provides a complete software development kit that uses the same architecture used to support security features in many client and server products from Netscape and other companies.
