Re: [Fed-Talk] Fixing SmartCard support in MacOSX
Re: [Fed-Talk] Fixing SmartCard support in MacOSX
- Subject: Re: [Fed-Talk] Fixing SmartCard support in MacOSX
- From: "Fletcher, Boyd C. CIV US USJFCOM JFL J9935" <email@hidden>
- Date: Thu, 25 Sep 2008 18:48:18 -0400
- Thread-topic: [Fed-Talk] Fixing SmartCard support in MacOSX
Delete then recreate. We can't edit the location value on our boxes
boyd
Boyd Fletcher
Chief Engineer/Technical Manager CDCIE JCTD
O: 757.203.3290
M: 757.771.7084
Email: email@hidden (NEW!)
--------------------------
Sent using BlackBerry
----- Original Message -----
From: email@hidden <email@hidden>
To: Fletcher, Boyd C. CIV US USJFCOM JFL J9935
Cc: Mueller, David S CIV SSC San Diego, 2872 <email@hidden>; Apple Fed Talk <email@hidden>
Sent: Thu Sep 25 18:34:48 2008
Subject: Re: [Fed-Talk] Fixing SmartCard support in MacOSX
Another thing that bugs me, that perhaps someone has figured out, is
how to edit Identity Preferences?
On Sep 25, 2008, at 1823 , Fletcher, Boyd C. CIV US USJFCOM JFL J9935
wrote:
> it would be nice if they were consistent with their own guidelines :)
>
>
>
> On 9/25/08 1:04 PM, "Mueller, David S CIV SSC San Diego, 2872"
> <email@hidden> wrote:
>
>>>> 2. Add "File->New Identity Preference" to the KeyChain menu.
>>>> Burying
>> it by right clicking on a
>>>> certificate is not very user friendly.
>>
>> Having something only available via a contextual menu violates
>> Apple's
>> Human Interface Guidelines:
>>
>> "Always ensure that contextual menu items are also available as menu
>> commands. A contextual menu is hidden by default and a user might not
>> know it exists, so it should never be the only way to access a
>> command.
>> In particular, you should not use a contextual menu as the only way
>> to
>> access an advanced or power-user feature."
>>
>> http://developer.apple.com/documentation/UserExperience/Conceptual/Apple
>> HIGuidelines/XHIGMenus/chapter_17_section_5.html#//apple_ref/doc/
>> uid/TP3
>> 0000356-TPXREF113
>>
>> - David
>>
>> -----Original Message-----
>> From: Boyd Fletcher
>> Sent: Tuesday, September 23, 2008 6:59 AM
>> To: email@hidden
>> Subject: [Fed-Talk] Fixing SmartCard support in MacOSX
>>
>>
>> Judging by all the email still circulating on CAC/PIV support in
>> MacOS
>> X, its pretty clear that its not working reliably and the process
>> to get
>> it working is far from intuitive for normal users.
>>
>> Some suggestions based on my experiences and several others in the
>> office.
>>
>> 1. add ability to do wildcards or better yet make the software assume
>> all URLs derived from the base URL provided will use that certificate
>> (you could have a check box for that). finding the exact URL is not
>> something most users will get right and is certainly not user
>> friendly.
>>
>> 2. Add "File->New Identity Preference" to the KeyChain menu.
>> Burying it
>> by right clicking on a certificate is not very user friendly.
>>
>> 3. Add a right click setting in Safari and a menu option to set the
>> "ID
>> Preference" for a website for the current URL
>>
>> 4. In "New Id Preference" dialog, you can't tell which CAC
>> certificate
>> is which. users need to be able to tell which is ID, email sign,
>> email
>> encrypt.
>>
>> 5. Better yet, provide a UI in Safari to so that users can manage
>> URLs
>> that require certificates and provide a mechanism to assign which
>> certificate to use for that web site. Certificates would then be
>> sent to
>> that web site regardless of whether or not it asks so long as https
>> is
>> used. If this UI updates the Key Chain then thats even better.
>>
>> boyd
>> _______________________________________________
>> Do not post admin requests to the list. They will be ignored.
>> Fed-talk mailing list (email@hidden)
>> Help/Unsubscribe/Update your Subscription:
>>
>> This email sent to email@hidden
>>
>
> _______________________________________________
> Do not post admin requests to the list. They will be ignored.
> Fed-talk mailing list (email@hidden)
> Help/Unsubscribe/Update your Subscription:
>
> This email sent to email@hidden
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden