W3C home > Mailing lists > Public > public-web-security@w3.org > June 2011

Re: Request for feedback: DOMCrypt API proposal

From: David Dahl <ddahl@mozilla.com>
Date: Mon, 6 Jun 2011 07:10:43 -0700 (PDT)
To: "Richard L. Barnes" <rbarnes@bbn.com>
Cc: public-web-security@w3.org
Message-ID: <2024837872.124005.1307369443415.JavaMail.root@zimbra1.shared.sjc1.mozilla.com>
Richard:

This API is a pure web application API. I would like to study how we can extend this API for use with smart cards as there are a few use cases here as well. I would really like for someone with experience writing code for smart cards to help me figure this out.

Cheers,

David

----- Original Message -----
From: "Richard L. Barnes" <rbarnes@bbn.com>
To: "David Dahl" <ddahl@mozilla.com>
Cc: public-web-security@w3.org
Sent: Sunday, June 5, 2011 8:45:34 PM
Subject: Re: Request for feedback: DOMCrypt API proposal

I apologize if this question is obvious; I haven't had a chance to read the document yet.

Is there any notion of how this document relates to the PKCS11 standard for interfacing to crypto devices?  
<http://en.wikipedia.org/wiki/PKCS11>

PKCS11 clearly has more things than the DOMCrypt API would require (e.g., the ability to select and log into different devices).   But it seems like it would simplify implementation for browsers if they could just present a script with something logically equivalent to a virtual PKCS11 device, probably one per origin.  Especially given that at least one browser (Firefox) can use PKCS11 to talk to hardware devices.

--Richard
Received on Monday, 6 June 2011 14:11:11 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Monday, 6 June 2011 14:11:11 GMT