[foaf-protocols] Thoughts about FOAF+SSL and Flash/AS3

Mario Volke mario.volke at webholics.de
Wed Jun 24 18:04:20 CEST 2009


Hello,

I did some research about how to create a FOAF-SSL workflow without the 
keygen-tag or any server-side scripts,
but by only staying within a running Flash application. This question 
came up from my project Origo (http://www.origo-client.com)
which has a Flash user interface to manage and browse foaf profiles. 
Using the keygen-tag means to break the user experience because the user 
would have
to leave the Flash application.
I have now some ideas how certificate generation and installation could 
work totally within Flash
but I haven't tried or implemented it, yet:
- generate a valid certificate within Flash/AS3 (maybe as3crypto could 
help, http://code.google.com/p/as3crypto/)
- create a "data URI" with the generated certificate 
(http://en.wikipedia.org/wiki/Data_URI_scheme)
- call the data URI with the AS3-method navigateToUrl() 
(http://kb2.adobe.com/cps/141/tn_14192.html#geturl)
- every modern browser should now be able to install the certificate

As I've already said, I haven't tried it yet and I'm not 100% sure if 
this really works.
Any comments are welcome.

Mario


More information about the foaf-protocols mailing list