Martin Paljak wrote: > SmartCardWebApplet It is awesome that you are putting so much effort into getting smart cards "to the web", but I'm afraid I personally think that a Java approach is an enormous mistake.
I can not accept that a 1x1 pixel object would be a central part of a security system that needs to become *less* complicated for users. The need to re-implement every single component of OpenSC (card drivers, ASN.1 (wtf!?!"?!?) and pkcs15init) also make me believe that this is not the best approach. > OpenSC currently is geared towards C and "native" applications, Don't believe the web application hype. Anything from the web is just a stateless pig with lots of makeup. > SmartCardWebApplet on the other hand, is targeting the Java (1.6+) > platform. I'm sure there are mixed feelings about Java You could say. I think it's crap. > * It has direct access to smart cards via javax.smartcardio in > Java 1.6+ What I think you should do instead is work with me on creating the USB API that you would like to have in a crypto token. There are some Java wrappers for libusb, one of which has gotten fresh activity lately. (You could still continue the Java path, I just suggest working with a reasonable device instead.) The software stack for smart cards is so 1970 that my brain actually hurts when I think about it. It's literally a big pile of protocols, each one fiddling about with bits(!). It is 2010 and re-implementing ASN.1 in Java (or any other language, but especially Java) does not strike me as being the right answer. > one-click, no-install web application Yeah right. Still need the full stack of driver crap. USB, PC/SC, T0/T1, ASN.1, PKCS#15, what did I forget? Oh, ISO7816, maybe more. You mean all of those drivers, for all common devices, are now available by default in MacWinLinux? Forget it. //Peter _______________________________________________ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel
