Re: Signing using JS in Safari
On 2010/04/16 17:47 PDT, Mountie Lee wrote: > I really want digital signing feature on firefox as native without plugin. Do you know about Firefox's crypto.signtext JavaScript feature? It may not be perfect (as Anders will no-doubt remind us) but it's in Firefox and requires no plugin. -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto
Re: Signing using JS in Safari
I really want digital signing feature on firefox as native without plugin. On Fri, Apr 16, 2010 at 6:45 PM, Sunny wrote: > Thanks Anders. > This was really helpful. Going down i see applets as the only > solution if browser compatibility is to be taken seriously. I'm just > looking for signature plug-in and have no time to write an applet > using java pkcs apis. > Openoces looks promising but any idea of the level of support they > provide for issues in the api/code? > > On Apr 7, 11:45 am, Anders Rundgren wrote: > > Hi Sunny, > > I haven't heard about Message Pro. > > > > Here is an open source (free) applet plugin: > > > > http://www.openoces.org/index.html > > > > It is used in Denmark and maybe somewhere else as well. > > > > In Sweden the government has spent some $30M over the years on: > > > > http://nexussafe.com/en/Products/Nexus-Personal > > > > IMO, both solutions are inferior but since they are actually used > > it doesn't really matter :-) > > > > It interesting to note that many signature plugins come with an > > authentication plugin which unifies the PKI GUI which using TLS > > is quite terrible. > > > > Some crypto people think that replacing TLS-client-cert-auth with > > an application-level authentication mechanism is a bad thing but there > > are tons with drawbacks using TLS-client-cert-auth and there is no > > hope for improvements and the alternatives are already in place. > > Even USPTO have selected an Java applet for PKI login... > > > > Anders > > > > Sunny wrote: > > > Hi Anders, > > > Thanks for your mail. Is there any proprietary solution that's > > > named Message Pro or so?? > > > > > On Apr 6, 5:26 pm, Anders Rundgren wrote: > > >> Hi, > > > > >> Since there are no standards in this space most banks and > e-governments > > >> use proprietary (but cross-browser) Java plugins. In the EU there are > at > > >> least 10 different national schemes. > > > > >> Chrome and Safari presumably do not support any pre-configured > solution > > >> since no such solution has gotten any traction worth mentioning. > > > > >> There is a lot of stuff you can buy though... > > > > >> Anders > > > > >> Sunny wrote: > > >>> Hi, > > >>> I'm not able to find any literature on the topic of Signing data > > >>> using Digital Certificates with JS in Safari browser. > > >>> like, in Firefox, we have window.crypto.signtext() method that you > can > > >>> call from Java script to select a certificate and sign the data using > > >>> the certificate. > > >>> For IE, we have a CAPICOM plug-in to do that. > > >>> Do we have anything in chrome/safari that will help signing using > > >>> Digital Certificates in java script? Please let me know. > > -- > dev-tech-crypto mailing list > dev-tech-crypto@lists.mozilla.org > https://lists.mozilla.org/listinfo/dev-tech-crypto > -- Mountie Lee Tel : +82 2 2140 2700 E-Mail : moun...@paygate.net Twitter : mountielee === PayGate Inc. * WEB STANDARD PAYMENT * PCI DSS v1.2 COMPLIANT * www.paygate.net * payg...@paygate.net -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto
Re: Signing using JS in Safari
Thanks Anders. This was really helpful. Going down i see applets as the only solution if browser compatibility is to be taken seriously. I'm just looking for signature plug-in and have no time to write an applet using java pkcs apis. Openoces looks promising but any idea of the level of support they provide for issues in the api/code? On Apr 7, 11:45 am, Anders Rundgren wrote: > Hi Sunny, > I haven't heard about Message Pro. > > Here is an open source (free) applet plugin: > > http://www.openoces.org/index.html > > It is used in Denmark and maybe somewhere else as well. > > In Sweden the government has spent some $30M over the years on: > > http://nexussafe.com/en/Products/Nexus-Personal > > IMO, both solutions are inferior but since they are actually used > it doesn't really matter :-) > > It interesting to note that many signature plugins come with an > authentication plugin which unifies the PKI GUI which using TLS > is quite terrible. > > Some crypto people think that replacing TLS-client-cert-auth with > an application-level authentication mechanism is a bad thing but there > are tons with drawbacks using TLS-client-cert-auth and there is no > hope for improvements and the alternatives are already in place. > Even USPTO have selected an Java applet for PKI login... > > Anders > > Sunny wrote: > > Hi Anders, > > Thanks for your mail. Is there any proprietary solution that's > > named Message Pro or so?? > > > On Apr 6, 5:26 pm, Anders Rundgren wrote: > >> Hi, > > >> Since there are no standards in this space most banks and e-governments > >> use proprietary (but cross-browser) Java plugins. In the EU there are at > >> least 10 different national schemes. > > >> Chrome and Safari presumably do not support any pre-configured solution > >> since no such solution has gotten any traction worth mentioning. > > >> There is a lot of stuff you can buy though... > > >> Anders > > >> Sunny wrote: > >>> Hi, > >>> I'm not able to find any literature on the topic of Signing data > >>> using Digital Certificates with JS in Safari browser. > >>> like, in Firefox, we have window.crypto.signtext() method that you can > >>> call from Java script to select a certificate and sign the data using > >>> the certificate. > >>> For IE, we have a CAPICOM plug-in to do that. > >>> Do we have anything in chrome/safari that will help signing using > >>> Digital Certificates in java script? Please let me know. -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto
Re: Signing using JS in Safari
Hi Sunny, I haven't heard about Message Pro. Here is an open source (free) applet plugin: http://www.openoces.org/index.html It is used in Denmark and maybe somewhere else as well. In Sweden the government has spent some $30M over the years on: http://nexussafe.com/en/Products/Nexus-Personal IMO, both solutions are inferior but since they are actually used it doesn't really matter :-) It interesting to note that many signature plugins come with an authentication plugin which unifies the PKI GUI which using TLS is quite terrible. Some crypto people think that replacing TLS-client-cert-auth with an application-level authentication mechanism is a bad thing but there are tons with drawbacks using TLS-client-cert-auth and there is no hope for improvements and the alternatives are already in place. Even USPTO have selected an Java applet for PKI login... Anders Sunny wrote: Hi Anders, Thanks for your mail. Is there any proprietary solution that's named Message Pro or so?? On Apr 6, 5:26 pm, Anders Rundgren wrote: Hi, Since there are no standards in this space most banks and e-governments use proprietary (but cross-browser) Java plugins. In the EU there are at least 10 different national schemes. Chrome and Safari presumably do not support any pre-configured solution since no such solution has gotten any traction worth mentioning. There is a lot of stuff you can buy though... Anders Sunny wrote: Hi, I'm not able to find any literature on the topic of Signing data using Digital Certificates with JS in Safari browser. like, in Firefox, we have window.crypto.signtext() method that you can call from Java script to select a certificate and sign the data using the certificate. For IE, we have a CAPICOM plug-in to do that. Do we have anything in chrome/safari that will help signing using Digital Certificates in java script? Please let me know. -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto
Re: Signing using JS in Safari
Hi Anders, Thanks for your mail. Is there any proprietary solution that's named Message Pro or so?? On Apr 6, 5:26 pm, Anders Rundgren wrote: > Hi, > > Since there are no standards in this space most banks and e-governments > use proprietary (but cross-browser) Java plugins. In the EU there are at > least 10 different national schemes. > > Chrome and Safari presumably do not support any pre-configured solution > since no such solution has gotten any traction worth mentioning. > > There is a lot of stuff you can buy though... > > Anders > > Sunny wrote: > > Hi, > > I'm not able to find any literature on the topic of Signing data > > using Digital Certificates with JS in Safari browser. > > > like, in Firefox, we have window.crypto.signtext() method that you can > > call from Java script to select a certificate and sign the data using > > the certificate. > > > For IE, we have a CAPICOM plug-in to do that. > > Do we have anything in chrome/safari that will help signing using > > Digital Certificates in java script? Please let me know. -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto
Re: Signing using JS in Safari
Hi, Since there are no standards in this space most banks and e-governments use proprietary (but cross-browser) Java plugins. In the EU there are at least 10 different national schemes. Chrome and Safari presumably do not support any pre-configured solution since no such solution has gotten any traction worth mentioning. There is a lot of stuff you can buy though... Anders Sunny wrote: Hi, I'm not able to find any literature on the topic of Signing data using Digital Certificates with JS in Safari browser. like, in Firefox, we have window.crypto.signtext() method that you can call from Java script to select a certificate and sign the data using the certificate. For IE, we have a CAPICOM plug-in to do that. Do we have anything in chrome/safari that will help signing using Digital Certificates in java script? Please let me know. -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto
Signing using JS in Safari
Hi, I'm not able to find any literature on the topic of Signing data using Digital Certificates with JS in Safari browser. like, in Firefox, we have window.crypto.signtext() method that you can call from Java script to select a certificate and sign the data using the certificate. For IE, we have a CAPICOM plug-in to do that. Do we have anything in chrome/safari that will help signing using Digital Certificates in java script? Please let me know. -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto
