Foaf+ssl/Clients/CertSelection

From W3C Wiki
< Foaf+ssl‎ | Clients
Revision as of 18:44, 21 April 2011 by Bblfish (Talk | contribs)

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search

This aim of this page is to help show how each of the browsers presents the user with a certificate selection menu.

Notes

Most browsers, as pictured below, show the CN (Common Name) in the client certificate selection box. This is why it is important when creating certificates, to allow the user to specify his Common Name, so that he can easily distinguish the different certificates.

Desktop

All of these browsers could do with one major improvement, and that is showing the user which certificate he has used to authenticate to a web site. The Chromium issue 29784 is working on a very important fix.

Opera

Opera 10.10 on OSX has a very nice and intuitive certificate selector.

Opera 10 OSX Cert Selector.png

A small View button to the right hand side allows one to see all the details, but they are not in full view. One can easily see which certificate to choose.

Chrome

Chromium, the developer branch of Chrome fixed the client certificate selection issues. The user interface now looks very clean on OSX:

Chromium OSX Certificate selector.png

But not that good on Linux:

Chrome-cert-selection-linux.png

Firefox

Firefox on OSX and I believe all other platforms, shows the following certificate selection box.

Firefox Desktop OSX cert selector.png

This shows too much detail, most of which is meaningless to the user, and does not make it clear that the user has a choice of certificates. But it works.


Firefox under Linux example:

FireFox4.0-Linux.png

Safari

The user interface is very nice and minimal. But it is difficult now to get this selection box to pop up for Safari as once a certificate is selected it automatically sends that certificate on request, and there seems to be no way of choosing it or changing the selection.

Mobile environments

IPhone

The IPhone certificate selection mechanism is clean and simple

Iphone cert selection.jpg

Sadly a problem with the IPhone OS from 3.0 onwards makes it difficult to work with

Fennec

Fennec is Mozilla's mobile browser. On the OSX emulator it presented the following certificate selector

Fennec emulator cert selection.png