Thanks Anders. This was really helpful. Going down i see applets as the only solution if browser compatibility is to be taken seriously. I'm just looking for signature plug-in and have no time to write an applet using java pkcs apis. Openoces looks promising but any idea of the level of support they provide for issues in the api/code?
On Apr 7, 11:45 am, Anders Rundgren <anders.rundg...@telia.com> wrote: > Hi Sunny, > I haven't heard about Message Pro. > > Here is an open source (free) applet plugin: > > http://www.openoces.org/index.html > > It is used in Denmark and maybe somewhere else as well. > > In Sweden the government has spent some $30M over the years on: > > http://nexussafe.com/en/Products/Nexus-Personal > > IMO, both solutions are inferior but since they are actually used > it doesn't really matter :-) > > It interesting to note that many signature plugins come with an > authentication plugin which unifies the PKI GUI which using TLS > is quite terrible. > > Some crypto people think that replacing TLS-client-cert-auth with > an application-level authentication mechanism is a bad thing but there > are tons with drawbacks using TLS-client-cert-auth and there is no > hope for improvements and the alternatives are already in place. > Even USPTO have selected an Java applet for PKI login... > > Anders > > Sunny wrote: > > Hi Anders, > > Thanks for your mail. Is there any proprietary solution that's > > named Message Pro or so?? > > > On Apr 6, 5:26 pm, Anders Rundgren <anders.rundg...@telia.com> wrote: > >> Hi, > > >> Since there are no standards in this space most banks and e-governments > >> use proprietary (but cross-browser) Java plugins. In the EU there are at > >> least 10 different national schemes. > > >> Chrome and Safari presumably do not support any pre-configured solution > >> since no such solution has gotten any traction worth mentioning. > > >> There is a lot of stuff you can buy though... > > >> Anders > > >> Sunny wrote: > >>> Hi, > >>> I'm not able to find any literature on the topic of Signing data > >>> using Digital Certificates with JS in Safari browser. > >>> like, in Firefox, we have window.crypto.signtext() method that you can > >>> call from Java script to select a certificate and sign the data using > >>> the certificate. > >>> For IE, we have a CAPICOM plug-in to do that. > >>> Do we have anything in chrome/safari that will help signing using > >>> Digital Certificates in java script? Please let me know. -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto
