On Thu, Apr 19, 2007 at 03:11:51PM +0400, Sergei Vyshenski wrote:
Hi Sergei,
> I have published a scratch note "Browser interaction with the OpenXPKI server"
sounds interesting. Guess that's not exactly well-documented yet. Thanks for
the work.
> on a topic which is not very clear to me. Any edits, additions and comments
> are very welcome.
Apart from a bunch of spelling errors (which I can just update once you
check it into the SVN), here are some remarks:
- The "all browsers" section could benefit from mentioning that the uploaded
CSRs are in PKCS#10 format
- If you already mention technicalities (such as "is implemented in a Visual
Basic Script" - not sure if the user really needs to know), you could also
mention that this uses the standard MS XEnroll ActiveX control. Apparently
this has also changed on Vista - I remember Micha has some more info on that.
- Once could also mention that the CSPs can be used to create the request
on a hardware device such as a smart card or USB token, not sure if the
average user knows that
- Both MSIE as well as Firefox/Mozilla can do a certificate-based logon,
too. This is using the same technology as approval signing (a builtin
in the Firefox case, and the CAPICOM ActiveX component in the MS case)
- In MSIE, you can not only install the certificate to the browser using
the browser, but to the Windows certificate store, which is used by a
whole lot of applications (contrary to the Firefox case)
- AFAIK Opera has SPKAC support, too. Not that I've tested it
- On the same line, I've heard that SPKAC support was planned for Konqueror,
but I have again no idea how far that has come along.
HTH,
Alex
--
Dipl.-Math. Alexander Klink | IT-Security Engineer
[EMAIL PROTECTED] | working @ urn:oid:1.3.6.1.4.1.11417
-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
OpenXPKI-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-devel
