marwensaid / eid-applet

Automatically exported from code.google.com/p/eid-applet
Other
1 stars 1 forks source link

applet: accept FinishedMessage after ClientEnvironmentMessage #4

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
Currently, the applet doesn't accept a FinishedMessage from the service
after a ClientEnvironmentMessage (see also 4.1.2 of the dev-guide)

Suggested enhancement: accept FinishedMessage after
ClientEnvironmentMessage (could be useful when one only wants to perform a
quick configuration check)

Original issue reported on code.google.com by bart.han...@fedict.be on 31 Jul 2009 at 7:12

GoogleCodeExporter commented 9 years ago
We have to be careful not to create a client environment scanning applet that 
can be
abused by malicious parties to inspect the client web browsing runtime without 
the
user's consent. So I prefer to keep the client environment verification as part 
of an
actual eID operation.

Original comment by frank.co...@gmail.com on 3 Aug 2009 at 9:39

GoogleCodeExporter commented 9 years ago

Original comment by frank.co...@gmail.com on 15 Dec 2009 at 1:25