[Pcsclite-muscle] Proposal for a Web API for smart cards

[Daniel d'Andrada]

Hi Antoine,

I wasn't aware of this Secure Element Web API proposal. Quite
interesting. Thanks for the context.

On Fri, Aug 12, 2022 at 3:01 PM Antoine FERRON <aferron at cardhoc.com> wrote:
>
> I know there was a failed attempt to do very similar things.
> Here's an official GP proposal :
> http://globalplatform.github.io/WebApis-for-SE/doc/
>
> Also Gemalto pushed years ago in this direction to add SC in the web world. https://www.w3.org/2015/06/secure_elements.pptx But the challenges were not solved, mostly because of a lack of interest from the W3C and web browsers editors.
>
> W3C is now developing a FileAPI for the horror of security guy like me. But I still don't feel the mood to be interested to add smartcards.
>
> Interesting ways to make a direct use of a smartcard from the web in practice (but rather hacky) are :
> Use FIDO2 API to exchange message to a FIDO2 authr.
> The native engine such as Windows CNG GIDS. So the cryptography web API see a service provider and can use an underlying smart card.
>
> AF
>
> -----Original Message-----
> From: pcsclite-muscle <pcsclite-muscle-bounces at lists.infradead.org> On Behalf Of Andreas Schwier
> Sent: 12 August 2022 12:14
> To: pcsclite-muscle at lists.infradead.org
> Subject: Re: [Pcsclite-muscle] Proposal for a Web API for smart cards
>
> Hi Daniel,
>
> having such an API would be a great thing. Right now we need additional applications on the host to integrate with smart cards in a web application [1].
>
> My feeling so far was, that browser manufacturer didn't want to integrate with client side hardware.
>
> Has that changed and who is driving this ?
>
> Andreas
>
> [1] https://www.openscdp.org/scriptingserver/remoteterminal.html
>
> On 12.08.22 12:00, Daniel d'Andrada wrote:
> > Hi all,
> >
> > I'm proposing a Web API for smart cards, at PC/SC level. It will give
> > a page access to the PC/SC implementation (and card reader drivers)
> > available in the host OS. Meaning PCSClite on Linux, macOS and
> > ChromeOS.
> >
> > It's hosted here:
> > https://github.com/dandrader/web-smart-card/blob/main/README.md
> > If interested, you can file bugs in that repo to discuss problems you see in it.
> >
> > I would appreciate the opinion of the PC/SC experts and users here.
> >
> > Best regards,
> > Daniel
> >
> > _______________________________________________
> > pcsclite-muscle mailing list
> > mailto:pcsclite-muscle at lists.infradead.org
> > http://lists.infradead.org/mailman/listinfo/pcsclite-muscle
>
> --
>      ---------    CardContact Systems GmbH
>     |.##> <##.|   Schülerweg 38
>     |#       #|   D-32429 Minden, Germany
>     |#       #|   Phone +49 571 56149
>     |'##> <##'|   http://www.cardcontact.de
>      ---------    Registergericht Bad Oeynhausen HRB 14880
>                   Geschäftsführer Andreas Schwier
>
> _______________________________________________
> pcsclite-muscle mailing list
> mailto:pcsclite-muscle at lists.infradead.org
> http://lists.infradead.org/mailman/listinfo/pcsclite-muscle
> _______________________________________________
> pcsclite-muscle mailing list
> pcsclite-muscle at lists.infradead.org
> http://lists.infradead.org/mailman/listinfo/pcsclite-muscle