Hi,
I was wondering if there are any plans to include and this or the next
version of Firefox the ability to sign and encrypt WS-Security messages
using a client certificate (ex. smart card).
Many applications suffer from the lack of ability to sign web service
requests using the client's certificate.
Instead WS-Security is used mostly as a Server to Server communication
protocol thus losing the identity of the original requester.
I have written, for a local .NET project, a server side policy using WSE 3.0
which returns the info back to the client to sign but it would be much
better if this was done on the client side.
I'm also not sure what is the status of general web services support in
firefox but I know there are working ajax scripts which provide it.
I think it could be a great addition to Firefox to natively support
WS-Security.

Yours Truly,
Avner Peled.
[EMAIL PROTECTED]

-- 
View this message in context: 
http://www.nabble.com/WS-Security---Client-signature-encryption-tf3338180.html#a9284071
Sent from the Mozilla - Security mailing list archive at Nabble.com.

_______________________________________________
dev-security mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security

Reply via email to