Re: [Fed-Talk] Forcing Safari to use Email Cert
Re: [Fed-Talk] Forcing Safari to use Email Cert
- Subject: Re: [Fed-Talk] Forcing Safari to use Email Cert
- From: Dan Morrison <email@hidden>
- Date: Mon, 12 May 2008 18:48:45 -0600
I'll second that in 10.5.2, trying to set an identity preference causes
Keychain to crash.
I think the real answer is that the DoD/MSFT need to fix OWA to ask for
the proper certificate and return the proper error. Of course, if
Safari provided a sane way to force a manual cert selection and then
cache the user's choice for that site and the browser session, that
would work too.
Unfortunately, yesterday the cable to my card reader shorted out, so
even working software wouldn't do me much good now. ;)
Dan
Timothy J Miller wrote:
On May 12, 2008, at 9:32 AM, Billy Lenox wrote:
Following this by Timothy Miller : "Set an identity preference on
your email signing cert. Right click on it in Keychain, select "New
Identity Preference" and fill in the dialog for your OWA site" Does
nothing but causes Keychains and or Safari to Crash.
This is new in 10.5.2; worked in 10.5.1 when I last needed to hit DoD
OWA from my Mac. I'll log a bug today.
Apple just needs to make it better for the Users and Add the Ask to
Choose Certificate.
The problem with this is you'll get asked *all the time*. HTTP is
stateless, and the browser will drop the connection between page
fetches. Each time the browser needs to open up a connection, you'll
get prompted to select the cert again.
Try it in Firefox and you'll see what I mean. It even happens in IE.
There's no good solution. Auto-selection interferes least with the user
but sometimes gets it wrong, and with no control over the server there
may not be a good failure mode (as in this case). Manual selection gets
freakin' annoying *very* quickly. Setting a preference has to be done
on a site-by-site basis, which is a annoying to maintain.
These are computers, not magical "divine my intent" boxes. :)
-- Tim
------------------------------------------------------------------------
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden