On 09/27/2013 11:52 PM, From Ryan Sleevi:
Let me try it differently: What actions do you take on this information?

Terminating a current session or triggering authentication to a new session.

As far as I know, IE doesn't provide the smart card insertion/removal
events, except perhaps through ActiveX.

Yes exactly.

Why should a web page care about a user's hardware state, given that there
exist no Web APIs to actually leverage this hardware state?

Consider a banking site or others like administrative sites that use client certificates (provided on a smart card) .

This would be akin to wanting to know about USB events, for which there is
no USB API for in the Web [putting extensions aside for a moment]. Or
wanting to know when the user plugs in a new keyboard or mouse; why should
it matter?

Probably because we like to use a browser for such tasks instead of implementing a dedicated UI. And client certificates (which may be used on smart cards) are part of the browser capabilities.

--
Regards

Signer:  Eddy Nigg, StartCom Ltd.
XMPP:    start...@startcom.org
Blog:    http://blog.startcom.org/
Twitter: http://twitter.com/eddy_nigg

--
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to