[OpenID] OpenID Providers Invited to Join in an NSTIC Pilot Proposal

[Eddy Nigg (StartCom Ltd.)]

Hi Francisco,

On 02/13/2012 12:03 AM, From Francisco Corella:
> One thing that's new in our pilot proposal is the use of keygen for
> automatic issuance of certificates.  I now know that you do issue
> certificates automatically, I tried it out yesterday.

Welcome!

> But you don't use keygen, do you?

It depends on the browser. Keygen is used everywhere except Internet 
Explorer where we deploy currently VBscript for the enrollment. And 
unfortunately Google Chrome doesn't support client certificate 
enrollment except in a limited form on Linux.

>  I suppose you use JavaScript to generate the keypair and to import 
> the certificate?

No, never - the keypair is always generated by the browser. See 
https://www.startssl.com/?app=25#51


Regards
Signer: 	Eddy Nigg, COO/CTO
	StartCom Ltd. <http://www.startcom.org>
XMPP: 	startcom at startcom.org <xmpp:startcom at startcom.org>
Blog: 	Join the Revolution! <http://blog.startcom.org>
Twitter: 	Follow Me <http://twitter.com/eddy_nigg>


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20120213/640f3b86/attachment.html>