Because smart cards are hardware devices on the client, and nothing in HTML, CSS, or JavaScript gives you access to the client's USB ports.

For now :-)

https://wicg.github.io/webusb/

i guess i wasnt clear. i meant java servlets, not js. something like: http://stackoverflow.com/questions/24351472/getattributejava...

For some reason actual smartcard applications seem to use proprietary applets rather than the open standards around client certs.

The tool is used to manage some our smart card applets. And since it web-based, we don't need to give the copy of the tool to other people.

I don't write the tool, but maybe I can convince my supervisor to rewrite it into desktop app :)