[Pcsclite-muscle] Proposal for a Web API for smart cards
aferron at cardhoc.com
Fri Aug 12 06:01:00 PDT 2022
I know there was a failed attempt to do very similar things.
Here's an official GP proposal :
Also Gemalto pushed years ago in this direction to add SC in the web world. https://www.w3.org/2015/06/secure_elements.pptx But the challenges were not solved, mostly because of a lack of interest from the W3C and web browsers editors.
W3C is now developing a FileAPI for the horror of security guy like me. But I still don't feel the mood to be interested to add smartcards.
Interesting ways to make a direct use of a smartcard from the web in practice (but rather hacky) are :
Use FIDO2 API to exchange message to a FIDO2 authr.
The native engine such as Windows CNG GIDS. So the cryptography web API see a service provider and can use an underlying smart card.
From: pcsclite-muscle <pcsclite-muscle-bounces at lists.infradead.org> On Behalf Of Andreas Schwier
Sent: 12 August 2022 12:14
To: pcsclite-muscle at lists.infradead.org
Subject: Re: [Pcsclite-muscle] Proposal for a Web API for smart cards
having such an API would be a great thing. Right now we need additional applications on the host to integrate with smart cards in a web application .
My feeling so far was, that browser manufacturer didn't want to integrate with client side hardware.
Has that changed and who is driving this ?
On 12.08.22 12:00, Daniel d'Andrada wrote:
> Hi all,
> I'm proposing a Web API for smart cards, at PC/SC level. It will give
> a page access to the PC/SC implementation (and card reader drivers)
> available in the host OS. Meaning PCSClite on Linux, macOS and
> It's hosted here:
> If interested, you can file bugs in that repo to discuss problems you see in it.
> I would appreciate the opinion of the PC/SC experts and users here.
> Best regards,
> pcsclite-muscle mailing list
> mailto:pcsclite-muscle at lists.infradead.org
--------- CardContact Systems GmbH
|.##> <##.| Schülerweg 38
|# #| D-32429 Minden, Germany
|# #| Phone +49 571 56149
|'##> <##'| http://www.cardcontact.de
--------- Registergericht Bad Oeynhausen HRB 14880
Geschäftsführer Andreas Schwier
pcsclite-muscle mailing list
mailto:pcsclite-muscle at lists.infradead.org
More information about the pcsclite-muscle