Hi,



> Ari Suutari wrote:
>
> > I didn't find anything special done in Initialization/Generate new CA
> > secret key, the page just seems to build a command based on javascript
> > -prompted values to a hidden field and post it to server. Looks like
this
> > could be implemented also with regular html form which has fields
> > corresponding the prompts.
>
> This is true, the CA initialization was developed using javascript files
> to implement a step-by-step driven process. This can be changed if there
> is any problem with that.
>

    I think that that would be great (also in other places where possible) !
    Things under the hood are important but so is the user interface !

> >     I understand that this is not most important issue, but when showing
> >     things to one's boss for example how things look and work suddenly
> >     become more imporant.
>
> What is the problem with that ? Either if you have organizations which
have
> adopted Win+IE you can always ask them for a single system (the CA) to be
> different and have Netscape installed, I think...

    Ahhh, I was trying to tell why I'm talking about how the user interface
works.
    Netscape is not a problem for me or anyone else at our office.

>
> >     However, one can not always choose which browser to use.
> >     We have some customer organizations which have decided to use
> >     IE and there is nothing we can do about it. And actually, for those
> >     platforms that it exists it isn't that bad (when thinking about
> >     normal use, not in openca context).
>
> I agree, that's why we do not exclude adding support for IE. Also if you
> can have the organization to buy Smart Cards (with RSA chip) integrated
> with the browser you have a quite secure environment also using IE...


    I have couple of  smart cards here (Schlumberger & Dallas)
    so I could do testing with IE & netscape
    (also maybe with mozilla, it looks like smart card dlls meant for
windows
    netscape also work with windows mozilla). Actually, the reason why I'm
    really interested in openca is that there are no handy tools to populate
    these cards with certificates (or let me correct: there are tools but
    they cost megabucks).

        Ari S.



_________________________________________________________________
OpenCA - Users Support Mailing List       [EMAIL PROTECTED]

Reply via email to