[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ms-cryptoapi
Subject:    Re: Form signing in browsers - using the CryptoAPI
From:       Jay Wherley <wherley () IX ! NETCOM ! COM>
Date:       1998-09-22 12:10:09
[Download RAW message or body]


what i found really helpful in doing this (putting together an activex signed control
that generated a PKCS#7 digitally signed message) was john boyers article on
digital signatures in the june 1998 dr. dobbs. check it out if you can.
to get my pkcs#7 messages to cross verify in netscape and outlook
i had to had to place an "authorized extension" containing the signing time
in the message. (how to do this isn't documented well in Microsoft CAPI imho).
also note that johns article brings up good points/issues on the certificate chain
that might be part of the PKCS#7 message.
jay w.
wherley@ix.netcom.com

> I am interested in form signing, i.e. allowing a user to digitally sign
> information he has entered into text boxes etc on a web page, with the
> result being a PKCS#7 message that can be sent to the web server.
>
> Netscape Communicator 4.04 and later support form signing with their
> crypto.signText JavaScript method and SignVer signature validation tool (see
> http://developer.netscape.com/tech/security/index.html?content=formsign/form
> sign.html
>
> I was wondering what the best equivalent in Internet Explorer would be.  It
> looks possible through the use of an ActiveX control that uses the CryptoAPI
> to sign/validate etc.
>
> I have seen the E-Lock Technologies e-sign toolkit
> (http://www.elock.com/prodinfo/ESIGNSPEC.HTM) which does roughly this, but
> was curious to know of any other solutions available, such as a Microsoft
> solution? I would be interested to know what people would recommend.
>
> Thanks,
>
> Neil Trask
> BT
>

----------------------------------------------------------------
Users Guide http://www.microsoft.com/workshop/essentials/mail.asp
contains important info including how to unsubscribe.  Save time, search
the archives at http://discuss.microsoft.com/archives/index.html

[prev in list] [next in list] [prev in thread] [next in thread]