On Monday 27 November 2006 22:12, Eddy Nigg (StartCom Ltd.) wrote:
> Alon Bar-Lev wrote:
> > Sure it does, it makes users crazy if you re-prompt them for
> > certificate that was already selected.
> > https://bugzilla.mozilla.org/show_bug.cgi?id=149673
> > Opened: 2002-06-06 12:12 (!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!)
>
> The Mozilla browser always asks, which certificate to choose when
> performing client authentication. I don't see anything wrong with
> that...With Thunderbird, when a certificate has been correctly
> associated with the account, there is no need to re-select. In both
> cases the correct behavior in my opinion, with and without smart
> card.

While in my webmail site, I need to select a certificate almost very 
time I select an item... This is bad... Even I cannot work with it.

> >>  Personally I think, that anything which conforms to the
> >> PKCS11/15 standard
> >> is a worthy application / provider / whatever....(If the
> >> application is has
> >> a bad implementation...that speaks for the application itself
> >> and/or you might just improve it...)
> >
> > This is not so simple!
> > The application should be designed to support dynamic smartcard
> > environment.
> > Most importantly, they need to UNDERSTAND what is considered to
> > be best practice.
>
> I think it would be smarter to write a guide with best practices
> for application developers, instead to withheld important

This is what I am suggesting!
Before we list applications we create this guide.
Then we list applications and specify how they behave according to the 
suggested behavior.

> information from users and "punish" certain applications. I think
> it's somewhat of an overkill to filter applications based on the
> criteria you setup...And if I understand your suggestions
> correctly, than you wouldn't list Mozilla's software, which I view
> as shooting yourself in the foot...

No... It *WILL* be listed... But its issues will be available to 
users, so they can select the most appropriate application, or defer 
the decision to use smartcards.
Users will get more than a list of "Hay... I am working with 
smartcard", I argue with the "working" term.

Best Regards,
Alon Bar-Lev.
_______________________________________________
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel

Reply via email to