Hi all,

Currently I am testing a PKCS#11 module. This module has been tested
with Netscape 4.7x before trying Netscape 7.0, Mozilla 1.1, 1.2 and the
latest nightly build. 

With Netscape 4.79 (or IE 5.x) no problems arise when I use Client
Authentication with either a PKCS#12 or SmartCard solution. However with
any of the latest Mozilla powered browsers the client authentication is
performed for every item on the secure page. 

Normally with a P12 this will not be such a big problem, just cache the
master password and you would be al right. For a SmartCard solution
however, this is not the case: the user is requested to enter his/her
PIN for every item (or is it HTTP connection/reques?) made. This can be
emulated for P12 software tokens by requesting the master password to be
entered "Every time it is needed" in the preferences. 

Note too that disabling HTTP 1.1 will decrease the number of times the
PIN has to be entered. 

Is this a known issue? I couldn't find it using Google or Google groups.
It might have gone unnoticed due to the fact that Client Authentication
+ SmartCard + No PIN chaching is not used too much. 

Cheers, and thanks in advance,
Warper

PS. Testing of the (UTF-8) certificates for mail purposes went without a
hitch. OCSP support and CRL checking seems to be working fine too. 

Reply via email to