On 2011-06-20 09:29, Jean-Marc Desperrier wrote: > Anders Rundgren wrote: >>> The webcrypto-api proposal is oriented around certificate/X509/smartcard >>>> PKI, I end up with the feeling the two proposal lives in different realms. >> http://html5.creation.net/webcrypto-api >> >> Thanx J-M, I wasn't aware of this one. >> >> H**y c**p! Somebody is actually doing something! > > That proposal says it's using some of your ideas, so I didn't expect you > didn't know about it.
We have both come to the conclusion that Firefox et al sucks since just about all serious users need to deploy plugins in order to use their PKIs. Last I communicated with Channy it sounded like he planned to do something on the HTML level. Regarding technical solutions and proposals you now have three quite different takes on how to extend browsers. The gazillion messages on the OpenSC list indicates that token initialization is the #1 trouble. That's why I defined the whole stack from crypto HW to XML which is how Apple gets their stuff to work so great. Having one team create a protocol, another writing a browser, a third writing middleware and then add the different cards you will never get system that can be manag by an average user. Anders -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto