[Pcsclite-muscle] Proposal for a Web API for smart cards

[Antoine FERRON]

I know there was a failed attempt to do very similar things.
Here's an official GP proposal :
http://globalplatform.github.io/WebApis-for-SE/doc/

Also Gemalto pushed years ago in this direction to add SC in the web world. https://www.w3.org/2015/06/secure_elements.pptx But the challenges were not solved, mostly because of a lack of interest from the W3C and web browsers editors.

W3C is now developing a FileAPI for the horror of security guy like me. But I still don't feel the mood to be interested to add smartcards.

Interesting ways to make a direct use of a smartcard from the web in practice (but rather hacky) are :
Use FIDO2 API to exchange message to a FIDO2 authr.
The native engine such as Windows CNG GIDS. So the cryptography web API see a service provider and can use an underlying smart card.

AF

-----Original Message-----
From: pcsclite-muscle <pcsclite-muscle-bounces at lists.infradead.org> On Behalf Of Andreas Schwier
Sent: 12 August 2022 12:14
To: pcsclite-muscle at lists.infradead.org
Subject: Re: [Pcsclite-muscle] Proposal for a Web API for smart cards

Hi Daniel,

having such an API would be a great thing. Right now we need additional applications on the host to integrate with smart cards in a web application [1].

My feeling so far was, that browser manufacturer didn't want to integrate with client side hardware.

Has that changed and who is driving this ?

Andreas

[1] https://www.openscdp.org/scriptingserver/remoteterminal.html

On 12.08.22 12:00, Daniel d'Andrada wrote:
> Hi all,
> 
> I'm proposing a Web API for smart cards, at PC/SC level. It will give 
> a page access to the PC/SC implementation (and card reader drivers) 
> available in the host OS. Meaning PCSClite on Linux, macOS and 
> ChromeOS.
> 
> It's hosted here:
> https://github.com/dandrader/web-smart-card/blob/main/README.md
> If interested, you can file bugs in that repo to discuss problems you see in it.
> 
> I would appreciate the opinion of the PC/SC experts and users here.
> 
> Best regards,
> Daniel
> 
> _______________________________________________
> pcsclite-muscle mailing list
> mailto:pcsclite-muscle at lists.infradead.org
> http://lists.infradead.org/mailman/listinfo/pcsclite-muscle

-- 
     ---------    CardContact Systems GmbH
    |.##> <##.|   Schülerweg 38
    |#       #|   D-32429 Minden, Germany
    |#       #|   Phone +49 571 56149
    |'##> <##'|   http://www.cardcontact.de
     ---------    Registergericht Bad Oeynhausen HRB 14880
                  Geschäftsführer Andreas Schwier

_______________________________________________
pcsclite-muscle mailing list
mailto:pcsclite-muscle at lists.infradead.org
http://lists.infradead.org/mailman/listinfo/pcsclite-muscle