News for hackers. Stuff that matters.

A comment on Why not to whitelist operating system user agents. Parent comment

Re:Why not to whitelist operating system user agents by ricardobayes on Monday November 15, 2021 @08:32AM (#29227112)
Try Spanish online digital administration. The digital certificates only worked in IE. And mid-process they require installing a Java-based program that required a different type of digital certificate. That of course make you restart the browser and lose all the data entered. Just wow. I couldn't even come up with such a bad process if I wanted.
[ Parent | on HN ]
Re:Why not to whitelist operating system user agents by pezezin on Tuesday November 16, 2021 @07:43AM (#29239850)
Oh boy are you wrong. We Spanish people love trash talking our own country, but after 3 years in Japan, I can tell you that the Spanish banks and bureaucracy are light-years ahead of Japan.

At least in Spain we have online administration, even if it's not perfect. Here? Hand written forms, hankos and fax machines. Everything is at least ten times as difficult as it should be.

[ Parent | on HN ]
Re:Why not to whitelist operating system user agents by diggan on Monday November 15, 2021 @08:39AM (#29227194)
Not sure if you're referring to something old, I've only been in Spain since 2012 but I'm having zero issues with the digital certificate for various government websites, from hacienda to local city governments websites. Never have I been forced to install Java either. I usually use Firefox on Linux and seems to work fine, at least for me.
[ Parent | on HN ]
Re:Why not to whitelist operating system user agents by ricardobayes on Tuesday November 16, 2021 @03:50AM (#29238357)
It was just yesterday. To sign in you need @clave, but to actually sign the document, you need AutoFirma, that's the java-based tool.
[ Parent | on HN ]
Re:Why not to whitelist operating system user agents by diggan on Wednesday November 17, 2021 @07:20AM (#29252109)
That's strange, I've never needed @clave nor AutoFirm (and in fact, I've never even heard of AutoFirma before). I just use the digital certificate (for signing in and for signing documents) received from the government to sign everything directly in the browser, without any Java or anything else really.
[ Parent | on HN ]
Re:Why not to whitelist operating system user agents by ricardobayes on Wednesday November 17, 2021 @12:19PM (#29255851)
Well yes, your comment outlines the issue. Why is there three different certificates supposed to do the same thing?
[ Parent | on HN ]