3 ms·

Every device work by that definition. The question is about browser support without installing additional software. Here's my anecdote. In my country we use ce

Every device work by that definition. The question is about browser support without installing additional software. Here's my anecdote. In my country we use certificates to access government services. There are USB smartcards for secure storing and using those certificates. As there's no browser API to interact with smartcards, I'm forced to install their software. That software works only with installed root certificates (it uses https websocket on 127.0.0.1 to interact with browser). Few weeks ago they released new version and for some reason they decided to host it on a completely unrelated site owned by some private person. This is complete security madness, not even theater. So no, smartcards don't work. They're terrible from security perspective compared to native browser support, as they force user to install untrusted software with full access to the system and terrible security practices.

fomine3 5y ago
Smartcard access API should be made in a decade ago, rather than Web * (Bluetooth, MIDI, whatever) API. It's fundamental.
- baybal2 5y ago
  Smartcard access api was present in all browsers decades ago, then purposefully aabotaged to make way for webauthn - which still doesn't work.
  - fomine3 5y ago
    Is it called Java Applet? It's overkill.
  - psanford 5y ago
    Webauthn works great.
baybal2 5y ago
> The question is about browser support without installing additional software. It's there. SSL library interfaces with pkcs11 without browser involvement, (and yes, browser makers sabotaged the PKCS 12 API to push webauthn — which is not even a direct replacement.) I repeat, it's not singing/encrypting with API, but providing authentication/client side encryption on the TLS layer, which works flawlessly.