Will the WebCrypto API allow discovery/enumeration of certificates?

Hello,

 

as I've understood from conversations, there is no plan of implementation of
enumeration of certificates in webcryptoapi.

 

So, how would you suggest to accomplish the task of signing of an xml
document with client certificate within browser?

 

I'am aware of plugin implementations (java, npapi, activex, ...), but as I
know, this kind of solutions are all going to be unsupported in the future.

 

There is one other way and that is to implement this functionality in a
local webserver app.

 

Any other possibilities?

 

I still think that, it should be possible to sign something with client
certificate with webcrypto api. There was comment from Ryan Sleevi that
client certs contain PII. OK, yes they do, but why do we need them then, if
we can't use them. There should be some solution, don't you think so?

 

Thank you.

 

Regards

 

Gregor