Basically security done wrong because it will only affect users and won't stop attackers.

For a while Firefox ESR was the only one still supporting digital certificate request/generation (KEYGEN). My (not in Japan) and other banks used this as one securiy mechanism. With new EU rules they've now downgraded their security to a Phone app + some SMS verification.

Always spoof your user agent string, for firefox the setting is general.useragent.override

You think that's that easy?

Maybe now, not really sure if there are now changes (hopefully, since Microsoft is dropping IE), but in a time where browser plugins are abound you can't place an ActiveX plugin inside Firefox (or vice versa).

Try Spanish online digital administration. The digital certificates only worked in IE. And mid-process they require installing a Java-based program that required a different type of digital certificate. That of course make you restart the browser and lose all the data entered. Just wow. I couldn't even come up with such a bad process if I wanted.

Oh boy are you wrong. We Spanish people love trash talking our own country, but after 3 years in Japan, I can tell you that the Spanish banks and bureaucracy are light-years ahead of Japan.

At least in Spain we have online administration, even if it's not perfect. Here? Hand written forms, hankos and fax machines. Everything is at least ten times as difficult as it should be.

Not sure if you're referring to something old, I've only been in Spain since 2012 but I'm having zero issues with the digital certificate for various government websites, from hacienda to local city governments websites. Never have I been forced to install Java either. I usually use Firefox on Linux and seems to work fine, at least for me.

It was just yesterday. To sign in you need @clave, but to actually sign the document, you need AutoFirma, that's the java-based tool.

That's strange, I've never needed @clave nor AutoFirm (and in fact, I've never even heard of AutoFirma before). I just use the digital certificate (for signing in and for signing documents) received from the government to sign everything directly in the browser, without any Java or anything else really.

Well yes, your comment outlines the issue. Why is there three different certificates supposed to do the same thing?