webCrypto client-certificate generation

a brief search turns up https://pkijs.org/ and this post:
http://blog.engelke.com/2015/03/03/creating-x-509-certificates-with-web-crypto-and-pkijs/

aside from deprecation of that useful element, chromium has some other annoyances w/ WebID:

1) modal certificate-select dialog. (firefox can select an automatic default)

 a barrage of 6-7 dialogs which all have to be OK'd is common. simply closing the last tab causes the fun to begin anew
 yes, please tell databox.me, rww.io, data.fm, w3.org, wikidata.org that i really am me so i can try your app!

 any extensions to fix this? chrome://settings tweaks?

2) no way to permanently accept self-signed servercerts? (firefox offers this)

 LetsEncrypt will help, but what about users running OwnCloud-LDP on their own devices, w/ hostnames of 'localhost' or 'laptop' ?

 you can likely import your own CA deep in the browserinternals or /etc/ca-certificates but non-technical users who want some moderately-secure data-autonomy do what?

Received on Thursday, 30 July 2015 17:44:08 UTC