Bug#805503: iceweasel: Use libnssckbi.so of libnss3

[Elrond]

Package: iceweasel
Version: 38.4.0esr-1~deb8u1
Severity: wishlist

Hi,

iceweasel seems to chip its own version of libnssckbi.so,
while libnss3 also has one. This library mainly contains
the list of certificate authorities.

Unless there is a specific need to chip a local version, it
would be better to use the shared version in libnss3 for
various reasons.

Reasons include:
* If one needs to be updated (for security reasons), then
  the other needs updating also, keep work for security
  lower, hopefully.
* If people want to replace it (to have their own set up
  certificates), they need to remember to replace both.
* Wasted disk space.

If the reason for using a local version is documented
somewhere, then that place should be improved, because I
was not able to find it.


/usr/lib# find . -iname '*nssckbi*' -ls              
-rw-r--r--   1 root     root       685944 Aug 18 11:05 ./x86_64-linux-gnu/nss/libnssckbi.so
-rw-r--r--   1 root     root       499636 Nov  4 08:16 ./iceweasel/libnssckbi.so


Cheers

    Elrond