On Monday 27 November 2006 22:12, Eddy Nigg (StartCom Ltd.) wrote: > Alon Bar-Lev wrote: > > Sure it does, it makes users crazy if you re-prompt them for > > certificate that was already selected. > > https://bugzilla.mozilla.org/show_bug.cgi?id=149673 > > Opened: 2002-06-06 12:12 (!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!) > > The Mozilla browser always asks, which certificate to choose when > performing client authentication. I don't see anything wrong with > that...With Thunderbird, when a certificate has been correctly > associated with the account, there is no need to re-select. In both > cases the correct behavior in my opinion, with and without smart > card.
While in my webmail site, I need to select a certificate almost very time I select an item... This is bad... Even I cannot work with it. > >> Personally I think, that anything which conforms to the > >> PKCS11/15 standard > >> is a worthy application / provider / whatever....(If the > >> application is has > >> a bad implementation...that speaks for the application itself > >> and/or you might just improve it...) > > > > This is not so simple! > > The application should be designed to support dynamic smartcard > > environment. > > Most importantly, they need to UNDERSTAND what is considered to > > be best practice. > > I think it would be smarter to write a guide with best practices > for application developers, instead to withheld important This is what I am suggesting! Before we list applications we create this guide. Then we list applications and specify how they behave according to the suggested behavior. > information from users and "punish" certain applications. I think > it's somewhat of an overkill to filter applications based on the > criteria you setup...And if I understand your suggestions > correctly, than you wouldn't list Mozilla's software, which I view > as shooting yourself in the foot... No... It *WILL* be listed... But its issues will be available to users, so they can select the most appropriate application, or defer the decision to use smartcards. Users will get more than a list of "Hay... I am working with smartcard", I argue with the "working" term. Best Regards, Alon Bar-Lev. _______________________________________________ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel