Authoritative MSFT response on IE encryption/signatures

["Anders Rundgren" <anders.rundgren@telia.com>]

David Cross is a Windows Program Manager.

 

http://www.microsoft.com/communities/newsgroups/en-us/default.aspx?&guid=&sloc=en-us&dg=microsoft.public.security.crypto&p=1&tid=9db825e3-a115-4311-ad57-68f976204b1b&mid=c4d67db7-9774-4ff5-ab6e-a08a68643e46

 

If the link does not work, here is the content:

 

 

 Correct - you need an ActiveX control within IE to perform crypto
operations. CAPICOM is one such option.

--
David B. Cross [MS]
--
This posting is provided "AS IS" with no warranties, and confers no rights.



"Anders Rundgren" <AndersRundgren@discussions.microsoft.com> wrote in
message news:9DB825E3-A115-4311-AD57-68F976204B1B@microsoft.com...
> An OASIS TC is currently toying with the idea that MSIE can,
> without adding any native extension code, perform XML Signatures and
> possibly also XML Encryption, by an invocation from a web page:
>
> http://www.oasis-open.org/committees/download.php/16304/agsc-tpki-requirements-00.txt
>
> To my knowledge this is not the case. You have to use a Java
> applet, install CAPICOM, or something similar in order to perform
> signature or encryption operations in the browser environment.
>
> Could somebody ON THIS LIST (not off-list) verify (or not) this statement?
>
> Anders Rundgren
>
> --
> Disclaimer: The views expressed in this message are solely the
> author''s and should not be attributed to his employer or their clients