Hi Guys, I want to know the opinion of you. In a project I did a applet to xml signature, that applet needs to get a certificate from a device using a token password (using sun.pkcs11 library). I need build a solution easy to run and configure for any application (Web or Desktop). I thought use services (using a tomcat local server, we will call localapp) instead applets. I mean, the user needs install a package (.exe or .zip 20 ~ 30 MB) to configure that localapp on a local server in a specific port to get the request from the remote web application that needs get the certificate, passing the password via http post or get to the localapp . I will add security messaging.
NOTE: The application it's a product from the company where I work and I want to improve it, cause sometimes it's incompatible with mac(java plugin for chrome ), and sometimes runs slow