Re: [opensc-devel] OpenSC shared mode

2011-05-07 Thread Alon Bar-Lev
On Sat, May 7, 2011 at 10:57 PM, Peter Stuge wrote: > Alon Bar-Lev wrote: >> However, there are some advanced cards that can generate >> authentication token, so you can actually authenticate once using >> PIN get authentication token out of the card (many can be available >> at same time), then e

Re: [opensc-devel] OpenSC shared mode

2011-05-07 Thread Peter Stuge
Alon Bar-Lev wrote: > However, there are some advanced cards that can generate > authentication token, so you can actually authenticate once using > PIN get authentication token out of the card (many can be available > at same time), then each transaction is authenticated using these > tokens. This

Re: [opensc-devel] OpenSC shared mode

2011-05-07 Thread Alon Bar-Lev
1. Firefox behaves correctly, it opens long living session with crypto token, in order to reduce the number of times user is prompted for passphrase. 2. Firefox monitors slots, to be able to detect new certificate availability so it can prompt the user for one if requested. It is true that it can

Re: [opensc-devel] OpenSC shared mode

2011-05-07 Thread Juan Antonio Martinez
El sáb, 07-05-2011 a las 08:01 +0200, Frank Morgner escribió: > Hi! [...] > In your example, Juan, you say that Firefox calls C_Init to initialize > the card for pkcs11. I'm not an expert for p11, but is it really needed > to actually lock the card on initialization and keep an established > connec