Harry,
> > This thread shows that a workshop on user certificates would be
> > useful. Are you still planning on having one this spring, or have
> > you given up on that?
>
> We'll see. It depends on how the Web Crypto WG goes, some amount
> (although not everything talked about on this mailing list)
> certificate handling is in "secondary features" so I see no real
> reason for another workshop at this point unless it seems another WG
> is necessary to do that work.
The Web Crypto WG is about a JavaScript API. Issuing and using
certificates should not require JavaScript. TLS client certificates
are not a JavaScript feature. The <keygen> element, a building block
for certificate issuance, is not a JavaScript feature. It is possible
today to issue a certificate automatically to at least one browser
(Firefox) without JavaScript, although not securely.
A workshop would help you decide whether a WG is needed; and it would
be useful to get the people interested in certificates in one room,
whether or not a WG follows.
Francisco