Javascript – key / certificate from USB Token

by

It is not possible for now. The WebCryptoApi does not support using keys stored in external keystores like smartcards, Mozilla keystore or Windows KeyStore (used by Chrome and Explorer), and reading the comments of the last conferences, it is not a current priority.

There is another Javascript API specification of W3C to be used with Web Cryptography Api. See WebCrypto Key Discovery

This note describes a JavaScript API for discovering named, origin-specific pre-provisioned cryptographic keys for use with the Web Cryptography API.

Unfortunately is still a working group under development.

More Related Contents:

  1. Why does Google prepend while(1); to their JSON responses?
  2. SecurityError: Blocked a frame with origin from accessing a cross-origin frame
  3. JavaScript: client-side vs. server-side validation
  4. Sign PDF with plain JavaScript
  5. Sanitize/Rewrite HTML on the Client Side
  6. How does Content Security Policy (CSP) work?
  7. Detecting if a browser is using Private Browsing mode
  8. How to read a HttpOnly cookie using JavaScript
  9. What are “top level JSON arrays” and why are they a security risk?
  10. Where to save a JWT in a browser-based application and how to use it
  11. Is JSON Hijacking still an issue in modern browsers?
  12. Cross-site AJAX requests
  13. What good ways are there to prevent cheating in JavaScript multiplayer games?
  14. Is Javascript eval() so dangerous? [duplicate]
  15. Secure distribution of NodeJS applications
  16. JSON security best practices?
  17. How to load a PKCS#12 Digital Certificate with Javascript WebCrypto API
  18. How to prevent direct access to my JSON service?
  19. CSRF protection with CORS Origin header vs. CSRF token
  20. Safe value must use [property]=binding after bypass security with DomSanitizer
  21. Check if a file exists locally using JavaScript only
  22. Alternatives to JavaScript eval() for parsing JSON
  23. Web application access user’s file system
  24. How to secure the JavaScript API Access Token?
  25. Disable drop paste in HTML input fields? [duplicate]
  26. How to send secure AJAX requests with PHP and jQuery
  27. Why is “javascript:” pseudo-protocol stripped from URL bar when pasted?
  28. What makes an input vulnerable to XSS?
  29. Get height of iframe with external URL
  30. Embedding youtube video “Refused to display document because display forbidden by X-Frame-Options”

Leave a Comment